Snort mailing list archives

Viewing ACID set's off P..O..R..N rules ...


From: "Jason Whitson" <jason () visionxtreme net>
Date: Mon, 21 Jul 2003 15:24:22 -0500

Well today I decided to turn on the P..O..R..N ruleset to see if anyone here
wan't working on ... work.

Much to my surprise, ACID "blew up" with Rule violations. This is great and
all but when I view the rule violations in the ACID console and refresh to
see the latest, all the rules that were listed get relisted because I was
viewing them!

Is there a way to exclude the machine I use to view the ACID console from
the rules? I would hate to have to explain the rule violationsfrom my
workstation. Even though the source IP is the box running snort ...

- Jason



-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: