Re: Custom rule sets

[Roman Danyliw <roman () danyliw com>]

On Mon, 26 Nov 2001, Madhav Diwan wrote:

[snip]
> If I make a custom rule for some type of signature that i define myself
> and i dont have a sid  in the rule .. how does this affect the placement
> of an alert from that rule into a Snort MySQL database ?

Defining custom rules (with or without a sid) does not present any
problems for the Snort MySQL database.  It _will_ be logged into the
database.  The DB schema applies its own unique key to the signatures.

Roman


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users