Snort mailing list archives
Disable a rule when another trigger
From: Flavian Dola <flavian () flavian org>
Date: Thu, 15 Jul 2010 10:18:17 +0200
Hi, Is there a way to tell snort to disable a specific rule when another rule match a packet? In fact, I have two rules that generate two different alerts on one frame. Ideally, I would like to have just only one alert. And I don't want to disable permanently one of these rules. Thanks, Flavian ------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs
Current thread:
- Disable a rule when another trigger Flavian Dola (Jul 15)
- Re: Disable a rule when another trigger Nerijus Krukauskas (Jul 15)
- Re: Disable a rule when another trigger Matt Watchinski (Jul 15)
- Re: Disable a rule when another trigger Nerijus Krukauskas (Jul 15)