Snort mailing list archives

Getting rid of duplicate sensors


From: Michael Boman <michael.boman () securecirt com>
Date: Sun, 1 Sep 2002 21:39:03 +0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi there,

does anyone got a patch that ignore what BPF filters I have enabled over time? 

I have now several sensor definitions for the same sensor: one without BPF 
filter, one with a earlier version of BPF filter and a one with the current 
version of the BPF filter.

So, does anyone got a patch for snort that ignores the BPF part when it checks 
if the sensor is there or not?

Best regards
 Michael Boman

- -- 
Michael Boman
Security Architect, SecureCiRT (A SBU of Z-Vance Pte Ltd)
http://www.securecirt.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9chh8ds5fQJiraJwRAh1fAJ9rSo0O6XYJllFvlR/UgqjIn8yoIACg45pj
MlZfkYcPaDJbraj7SYbjddA=
=deZR
-----END PGP SIGNATURE-----



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: