Snort mailing list archives
RE: problem with suppress...
From: Graeme Rider <Graeme.Rider () colesmyer com au>
Date: Thu, 15 Jul 2004 08:43:02 +1000
Tobias, yes...l was not initially but then saw a reference to this flag in the 'pass' requirements... the suppress rule that l am using is in the local.rules file: suppress gen_id 1,sig_id 384 regards graeme -----Original Message----- From: Tobias Rice [mailto:rice () up edu] Sent: Thursday, 15 July 2004 12:02 AM To: Graeme.Rider () colesmyer com au Cc: snort-users () lists sourceforge net Subject: problem with suppress... -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Are you using the "-o" flag to change the rule testing order to Pass|Alert|Log? Tobias -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFA9TzJRJX8S0T0CkURAgydAKCqv7UOaJ4eL4JOIPIW3jnGpPcTyQCfVWq6 yHLh601GO7lWufmFYuCRXIE= =8xco -----END PGP SIGNATURE----- This email and any attachments may contain privileged and confidential information and are intended for the named addressee only. If you have received this e-mail in error, please notify the sender and delete this e-mail immediately. Any confidentiality, privilege or copyright is not waived or lost because this e-mail has been sent to you in error. It is your responsibility to check this e-mail and any attachments for viruses. No warranty is made that this material is free from computer virus or any other defect or error. Any loss/damage incurred by using this material is not the sender's responsibility. The sender's entire liability will be limited to resupplying the material. ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- problem with suppress... Graeme Rider (Jul 13)
- Re: problem with suppress... sekure (Jul 14)
- <Possible follow-ups>
- problem with suppress... Tobias Rice (Jul 14)
- RE: problem with suppress... Graeme Rider (Jul 14)
- Re: RE: problem with suppress... sekure (Jul 15)
- RE: RE: problem with suppress... Graeme Rider (Jul 15)
- Re: RE: problem with suppress... sekure (Jul 16)
- RE: problem with suppress... Graeme Rider (Aug 05)