Snort mailing list archives

disabling sniping


From: "Graham Bartlett \(grbartle\) via Snort-users" <snort-users () lists snort org>
Date: Thu, 2 May 2019 07:01:05 +0000

Hi

 

I have setup snort in inline mode.

 

It’s working as planned, but I would like the snort to silently discard dropped traffic, rather than sending an ICMP 
unreachable.


Is there a method to do this ?

I looked at sniping and setting the reply number to 0, but this didn’t seem possible.

 

<att> ::= (1..20)

 

Many thanks

Attachment: smime.p7s
Description:

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Current thread: