Snort mailing list archives
Re: severity rating
From: Nigel Houghton <nhoughton () sourcefire com>
Date: Thu, 3 Sep 2009 15:04:05 -0400
On Thu, Sep 3, 2009 at 2:25 PM, <Gregory.Brunn () compucom com> wrote:
Does anyone know where exactly the severity for a rule is defined? ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
I think you are referring to the "classification" of the rule. You will find that keyword with a parameter in each rule (Sourcefire VRT ones for sure, maybe not in any locally written ones you have) and the priority and description for each type of classification can be found in classification.config. -- Nigel Houghton Head Mentalist SF VRT http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/ ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- on to snort TROUBLESHOOTING Ron Kaye Jr (Sep 02)
- Crazy snort packet stats Billy Marshall (Sep 07)
- Message not available
- Re: severity rating Nigel Houghton (Sep 07)
- Message not available
- Re: Crazy snort packet stats Ryan Jordan (Sep 07)
- Re: Crazy snort packet stats Nerijus Krukauskas (Sep 07)
- Message not available
- Re: Crazy snort packet stats Billy Marshall (Sep 07)
- Crazy snort packet stats Billy Marshall (Sep 07)