Snort mailing list archives
Re: Is there any way to add the rule action in the alert?
From: Avery Rozar <Avery.Rozar () i-techsupport com>
Date: Mon, 15 Jul 2013 20:25:10 +0000
I see, thank you. On 7/15/13 4:20 PM, "waldo kitty" <wkitty42 () windstream net> wrote:
On 7/15/2013 15:56, Avery Rozar wrote:I would like to have the term "drop" or "dropped" in the Alert, is this possible?in the alert message text? yes, it is possible but you have to edit all enabled rules to put it in the msg:"message text here"; field in the rules... -- NOTE: No off-list assistance is given without prior approval. Please keep mailing list traffic on the list unless private contact is specifically requested and granted. -------------------------------------------------------------------------- ---- See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktr k _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Is there any way to add the rule action in the alert? Avery Rozar (Jul 15)
- Re: Is there any way to add the rule action in the alert? waldo kitty (Jul 15)
- Re: Is there any way to add the rule action in the alert? Avery Rozar (Jul 15)
- Re: Is there any way to add the rule action in the alert? waldo kitty (Jul 15)