Snort mailing list archives
Re: Finding which rule is blocking
From: waldo kitty <wkitty42 () windstream net>
Date: Wed, 16 Jul 2014 16:17:53 -0400
On 7/16/2014 2:50 PM, freber1977 wrote:
I am running snort on pfsense on a home network. When I enable snort the networking and internet keep working correctly except it blocks my BoxeeBox from logging in. It does not block the apps, if they are already running and snort it activated they keep working fine. So it seems to only be the login part for Boxee itself. My question is how can I track this down to which ruleset is causing the problem?
the GID:SID of the rule should be in your snort logs which i assume that pfsense has... aside: i wasn't aware that pfsense had blocking capabilities with snort... interesting... -- NOTE: No off-list assistance is given without prior approval. Please *keep mailing list traffic on the list* unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Finding which rule is blocking freber1977 (Jul 16)
- Re: Finding which rule is blocking waldo kitty (Jul 16)