[Snort-users] No alerts from rules but preprocessors
This is a discussion on [Snort-users] No alerts from rules but preprocessors within the Snort forums, part of the System Security and Security Related category; <body> <div align="left"><font face=0><span style="font-...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
03-02-2005
|
|||
|
|||
[Snort-users] No alerts from rules but preprocessors
<body>
<div align="left"><font face=0><span style="font-size:12pt">Hi,</span></font></div> <div align="left"><font face=0><span style="font-size:12pt">on my SuSE 9.1 mashine using snort 2.1.1 I just get alerts from the preprocessors (i.e. http_inspect, stream4).</span></font></div> <div align="left"><font face=0><span style="font-size:12pt">But no rule from the rules-files detects any alert. When I start snort ..... -T the rules-files seemed to be included.</span></font></div> <div align="left"><br> </div> <div align="left"><font face=0><span style="font-size:12pt">Any help?</span></font></div> <div align="left"><font face=0><span style="font-size:12pt">Thanks,</span></font></div> <div align="left"><font face=0><span style="font-size:12pt">Ralf</span></font></div> <div align="left"></div> </body> ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users 
|
Linear Mode
