RE: pass rules

["Hughes, Andy" <Andy.Hughes () aquilent com>]

Alberto
Thanks for the reply.  Perhaps I read right past it, but I did look there and didn't see the part about how to write 
pass rules and where to put them.  'Course, I've never been accused of being particularly adept at reading...
I'll try again.

Andy 


-----Original Message-----
From: Alberto Gonzalez [mailto:ag-snort () cerebro violating us]
Sent: Wednesday, October 23, 2002 2:22 PM
To: Hughes, Andy
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] pass rules


http://www.snort.org/docs/writing_rules/ < -- that is basically the 
"Snort Users Manual" so grab it, you can also grab it via PDF.



Hughes, Andy wrote:

> Hi all
> New to snort.  Have looked high and fairly low for info on pass rules, 
> and other than references to the fact that I should write them and use 
> them, and that I should then use the  -o  argument, I am not finding 
> the info on how to write one nor exactly where to put the rule if I 
> did write one.  Can someone point me in the direction?
>
> TIA,
>
> Andy Hughes
> Systems Engineer
> Aquilent, Inc
> (301) 939-1430
> 1100 West Street
> Laurel, MD 20707

-- 
The secret to success is to start from scratch and keep on scratching.




-------------------------------------------------------
This sf.net email is sponsored by: Influence the future
of Java(TM) technology. Join the Java Community
Process(SM) (JCP(SM)) program now.
http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0002en

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users