Re: snort priority

[Joel Esler <jesler () sourcefire com>]

BASE has no concept of priority.  BASE sorts by classification.


On Jul 1, 2010, at 5:25 AM, ll wrote:

> hi,all
> I have some questions about the rules's priority .the classtype keyboard 
> had pre-define some priority ,eg,high ,Middle ,low. and the priority can 
> overwrite it ,and the format of the priority define is like "priority : 
> 10;",so what does the 10 means  for ?  is it means high ? Middle ? low ? 
> which one ,I had no ideas the 10 meaning how important is it. and when I 
> use BASE, it seem no priority concept ,how can it list the events by the 
> priority ?


------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users