Snort mailing list archives

Snort 2.0.0 logging everything when using (session: printable)


From: "McKim, Tim" <McKim () nsf org>
Date: Tue, 29 Apr 2003 10:50:45 -0400

I just put snort 2.0.0 on a new install of RH 9. When trying to use my local
rules, I noticed that snort was logging all traffic -regardless of the
rules. After some testing, it appears that when I use (session: printable;)
in any rule it causes this behavior. These rules worked fine in 1.9.1 but
now using them fills my logs with extraneous data. Does anyone have any idea
as to the cause of this behavior, and more importantly how to correct it?

Thanks,

Tim McKim 


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: