Snort mailing list archives
Snort 2.0.0 logging everything when using (session: printable)
From: "McKim, Tim" <McKim () nsf org>
Date: Tue, 29 Apr 2003 10:50:45 -0400
I just put snort 2.0.0 on a new install of RH 9. When trying to use my local rules, I noticed that snort was logging all traffic -regardless of the rules. After some testing, it appears that when I use (session: printable;) in any rule it causes this behavior. These rules worked fine in 1.9.1 but now using them fills my logs with extraneous data. Does anyone have any idea as to the cause of this behavior, and more importantly how to correct it? Thanks, Tim McKim ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort 2.0.0 logging everything when using (session: printable) McKim, Tim (Apr 29)
