Snort mailing list archives
Snort dropping packages. How to ?
From: <armando () hadrion com br>
Date: Thu, 10 Oct 2002 12:16:33 -0300
Hi Guys, I'm with a doubt in snort, if someone can help me. ;) I have snort.conf using several rules. One of this files is virus.rules, where i only have virus signatures. =] And this rules is working properly when a virus arrive (it detect virus and log). But i like that the snort didn't log only, i like that snort log and drop (delete) the package whith mismatch with a virus signature (based on virus.rules). :)) How to do it ?? Some idea ?? Thkz a lot. Best Regards. [ ]'s
Current thread:
- Snort dropping packages. How to ? armando (Oct 10)
- <Possible follow-ups>
- Snort dropping packages. How to ? armando (Oct 10)
- Re: Snort dropping packages. How to ? Alberto Gonzalez (Oct 10)
- Re: Snort dropping packages. How to ? Alberto Gonzalez (Oct 10)
- Re: Snort dropping packages. How to ? Jason (Oct 10)
- Re: Snort dropping packages. How to ? Alberto Gonzalez (Oct 10)