mysql priority change

["Fred Poelma \(xsx4all\)" <Fpoelma () xs4all nl>]

Hi Everone,

I am using snort 1.9 on a linux box logging alert into a mysql database.
When I change the priority in classification.config it does not change in
the signature table for existing alerts only new (not yet in the siganture
table) alerts will get the new priority.
Example I change the priority of the porn rules from 1 to 2 , in the
database there are alerts with "dildo" keyword, new alerts with the "dildo"
keyword will still get priority 1  in stead of 2.
In the /var/log/snort/alert file I will see the correct new priority.

Question is it possible for snort to "update" the signature table with the
new priority?? or is there another sollution ??

Sorry for the poor example choice.

Thanks for your time
Fred Poelma






-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users