RE: problem with suppress...

[Graeme Rider <Graeme.Rider () colesmyer com au>]

Tobias,
        sorry about the delay but l am on a weeks holiday at the moment...
yes, l am using the -o flag...now the funny thing that l have found is that
l have several sensors running the same version of snort but only one, at
the moment, that does not repsonf to suppress commands...
it responds to pass commands (have not tried threshold,etc)...
regards
graeme

-----Original Message-----
From: Tobias Rice [mailto:rice () up edu]
Sent: Thursday, 15 July 2004 12:02 AM
To: Graeme.Rider () colesmyer com au
Cc: snort-users () lists sourceforge net
Subject: [Snort-users] problem with suppress...


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Are you using the "-o" flag to change the rule testing order to
Pass|Alert|Log?

Tobias
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFA9TzJRJX8S0T0CkURAgydAKCqv7UOaJ4eL4JOIPIW3jnGpPcTyQCfVWq6
yHLh601GO7lWufmFYuCRXIE=
=8xco
-----END PGP SIGNATURE-----


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

This email and any attachments may contain privileged and confidential information and are intended for the named 
addressee only. If you have received this e-mail in error, please notify the sender and delete this e-mail immediately. 
Any confidentiality, privilege or copyright is not waived or lost because this e-mail has been sent to you in error. It 
is your responsibility to check this e-mail and any attachments for viruses.  No warranty is made that this material is 
free from computer virus or any other defect or error.  Any loss/damage incurred by using this material is not the 
sender's responsibility.  The sender's entire liability will be limited to resupplying the material.


-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users