Snort mailing list archives
Re: Part of traffic matching wrong rule
From: "Andrew R. Baker" <andrewb () snort org>
Date: Tue, 24 Jun 2003 16:18:44 -0400
Juergen Anthamatten wrote:
I have the strange behaviour in snort that part of the traffic is matching the wrong rule.
[snip]
Is this a missconfiguration, or ??? TIA for any hints.....
There were a few bugs in the released version of Snort 2.0 with regards to rule ordering. These should all be fixed in the CVS version. Can you try upgrading and seeing if these alerts go away?
-A ------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Part of traffic matching wrong rule Juergen Anthamatten (Jun 24)
- Re: Part of traffic matching wrong rule James Nonya (Jun 24)
- Re: Part of traffic matching wrong rule Erek Adams (Jun 24)
- Re: Part of traffic matching wrong rule Andrew R. Baker (Jun 24)
- <Possible follow-ups>
- Re: Part of traffic matching wrong rule Juergen Anthamatten (Jun 25)
- Re: Part of traffic matching wrong rule JP Vossen (Jun 25)
- Re: Part of traffic matching wrong rule Chris Green (Jun 26)