Snort mailing list archives

Re: Post Detection Rule


From: "tantioification ." <tantio86 () gmail com>
Date: Wed, 24 May 2017 07:10:36 +0700

No, i dont have.
I just read snort manual and it give description about post-detection rule
options that "These options are rule spesific triggers that happen after a
rule has "fired""
What is it the meaning?

On May 24, 2017 5:26 AM, "Joel Esler (jesler)" <jesler () cisco com> wrote:

Example being?


*--*
*Joel Esler *| *Talos:* Manager | jesler () cisco com






On May 23, 2017, at 5:47 AM, tantioification . <tantio86 () gmail com> wrote:

Hi,

What is the meaning of "rule has fired" in post-detection rule options?
------------------------------------------------------------
------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest
Snort news!



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: