Snort mailing list archives
Snort rules merging and duplicate entries (3D Linked List)
From: Jukka Juslin <jtjuslin () hutcs cs hut fi>
Date: Thu, 2 Oct 2003 11:19:11 +0300 (EEST)
Does somebody know, what happens if I updated rules by merging and I get two identical rules? Will I get same alert twice or does a newer rules always win (and be the only one activated)? Thanks for info, Jukka ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- alert_unified only John Byrnes (Oct 01)
- Re: alert_unified only Chris Green (Oct 01)
- Snort rules merging and duplicate entries (3D Linked List) Jukka Juslin (Oct 02)
- Re: alert_unified only Erek Adams (Oct 05)