Snort mailing list archives

Re: BASE rule display


From: "Jefferson, Shawn" <Shawn.Jefferson () bcferries com>
Date: Tue, 17 Nov 2009 19:36:41 -0700

What do you mean exactly?  Base already has two methods of bringing up rule details.  There is a link to the rules .txt 
file and also you can link to the rule itself (actually you copy the rules into a directory that the base config points 
to).  This second method seems to do a grep and returns the full rule text when you click on [rule].  Is that what you 
wanted?


----- Original Message -----
From: firewalZ <firewalz () gmail com>
To: Snort-users () lists sourceforge net <Snort-users () lists sourceforge net>
Sent: Mon Nov 16 15:20:00 2009
Subject: [Snort-users] BASE rule display

Im a bit new to Snort/Base and Im wondering if there a way to get BASE
to display the full text of a rule that fires an alert, this would
really help the learning process.

Thanks

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: