Snort mailing list archives
How to turn on first-match-out criteria
From: Pablo Artuso <artusopablo () gmail com>
Date: Mon, 5 May 2014 12:55:57 -0300
Hi, I'm using Snort 2.9 . I have been searching this for hours and didn't found the answer (even in the archives of this list). I read that, in previous versions, it was the default configuration. How can I configure my Snort in order to accomplish both thing : - Alert when a rule match. - Finish. I mean, stop matching other rules. Thank you! Kind regards, Pablo
------------------------------------------------------------------------------ Is your legacy SCM system holding you back? Join Perforce May 7 to find out: • 3 signs your SCM is hindering your productivity • Requirements for releasing software faster • Expert tips and advice for migrating your SCM now http://p.sf.net/sfu/perforce
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- How to turn on first-match-out criteria Pablo Artuso (May 05)
- Re: How to turn on first-match-out criteria Pablo Artuso (May 28)