-c switch

[scott hutinger <srh () www mprojects wiu edu>]

Should -c be treated a bit different?

For example, I was starting up snort (debug version)
./snort -... /usr/local/etc/rules/snort.conf
This of course made snort think the rules were not rules, since I forgot 
to use -c before it.

Possibly -f (filter) would be better instead of needing -c for the rules.
I would think the rules would be a last parameter, as they are important.

Probably people would not agree with this, but possibly a detection of 
the rules
and a verbose error that -c should be used instead of no -c.  I'm sure 
this has come
up before.  I normally don't manually start snort, so forgetting the -c 
switch caused
all sorts of problems.

scott

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users