Snort mailing list archives
Re: Segregating drop alerts
From: waldo kitty <wkitty42 () windstream net>
Date: Tue, 26 May 2015 13:37:59 -0400
On 05/26/2015 10:01 AM, Anshuman Anil Deshmukh wrote:
Yes. The second rule which I mentioned is the drop. It will not log only in case if I set it as sdrop which is silently drop where it doesn't log it. But as said earlier we aren't using sdrop. Hence the alert as well as drop are getting logged in the log file.
why have both if both are logging and you want only one to log? when you change the alert rule to a drop rule, you can also add "DROPPED: " to the beginning of the message in the rule... -- NOTE: No off-list assistance is given without prior approval. Please *keep mailing list traffic on the list* unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Segregating drop alerts Anshuman Anil Deshmukh (May 15)
- Re: Segregating drop alerts Anshuman Anil Deshmukh (May 22)
- <Possible follow-ups>
- Re: Segregating drop alerts Glenn Forbes Fleming Larratt (May 22)
- Re: Segregating drop alerts Anshuman Anil Deshmukh (May 22)
- Re: Segregating drop alerts Glenn Forbes Fleming Larratt (May 22)
- Re: Segregating drop alerts Anshuman Anil Deshmukh (May 25)
- Re: Segregating drop alerts Anshuman Anil Deshmukh (May 26)
- Re: Segregating drop alerts Rodgers, Anthony (DTMB) (May 26)
- Re: Segregating drop alerts Glenn Forbes Fleming Larratt (May 26)
- Re: Segregating drop alerts Anshuman Anil Deshmukh (May 26)
- Re: Segregating drop alerts waldo kitty (May 26)
- Re: Segregating drop alerts Anshuman Anil Deshmukh (May 26)
- Re: Segregating drop alerts Joel Esler (jesler) (May 26)
- Re: Segregating drop alerts Joel Esler (jesler) (May 26)
- Re: Segregating drop alerts waldo kitty (May 26)