Re: snortcenter 1.0RC1

[Rodrigo Goya <lucent () securenet com mx>]

Hey Todd,

I think you have to remove the rule first from the "default template".

On the Rule Configuration screen, On the left hand side (below
where you pick the sensor to adjust), there're 3 choices:
        Activate Default Active Snort Ruleset
        Activate Default Inactive Snort Ruleset
        Activate Unconfirmed Deleted Rules

Try to deactivate the three of them and play with the rules, maybe
that'll help.

Cheers,
Rodrigo

On Fri, Jun 27, 2003 at 03:24:24PM -0500, Todd Holloway wrote:
> there are a few bugs with the snortcenter 1.0-RC1 that I'm experiencing...
> is this program even "active"...I noticed the last update with 2002-05-14.
>
> the most painful bug is I have to deactivate rules manually,
> the select all works but the "do with selected" doesn't :(
>
> it looks like a great product, but I don't know if
> it's something I can show off to the boss, if it's a 
> year plus out of date.
>
> todd
--------------------------------------------------------------
"What is the most effective Windows NT remote management tool?
A car."
        - Network Intrusion Detection, An Analyst's Handbook
          2nd Edition, 2000
          Stephen Northcutt et al, page 147



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users