Rule Order

["Ron Shuck" <rshuck () Buchanan com>]

Hi,

Has anyone else changed the rule order under 2.0?

When I upgraded to 2.0, I started having problems with ICMP alerts when
my rule order was set to 'pass alert log'. Actually, any setting other
than default caused problems. ICMP alerts happen, they just skip the
normal rule and trigger the "Undefined Code" rule.

TIA,

Ron Shuck, CISSP, GCIA - Managing Consultant 
Buchanan Associates - A Technology Company in the People Business 
http://www.buchanan.com 
http://www.isc2.org
http://www.giac.org


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users