Snort mailing list archives
Re: acid, sig_priority
From: Chris Green <cmg () uab edu>
Date: Tue, 02 Dec 2003 21:10:12 -0500
Nicholas Bernstein <nick () docmagic com> writes:
Could someone tell me what exactly sig_priority does? Is it a general threat level? i.e remote root could be 5 where info gathering might be 1? Am I way off?
It's supposed to be. It's not that useful currently ( and never has been ). Preprocessors generally use 5 and rules use 1-3. Look at classification.config for what is high/low. -- Chris Green <cmg () dok org> "I'm beginning to think that my router may be confused." ------------------------------------------------------- This SF.net email is sponsored by OSDN's Audience Survey. Help shape OSDN's sites and tell us what you think. Take this five minute survey and you could win a $250 Gift Certificate. http://www.wrgsurveys.com/2003/osdntech03.php?site=8 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- acid, sig_priority Nicholas Bernstein (Dec 02)
- Re: acid, sig_priority Chris Green (Dec 02)