Re: Packet tripping multiple rules?

[Jason Brvenik <jasonb () sourcefire com>]

Have a look at event queue in the manual for an explanation of what
happens in that case.

On Mon, Nov 23, 2009 at 10:36 AM, Guise McAllaster
<guise.mcallaster () gmail com> wrote:
> I'm curious, if a packet matches multiple rules do they all fire off or does
> it fire off the first alert it matches and then stops looking?
>
> Thanks.
>
> Guise
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus
> on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs