Snort mailing list archives
Re: Is there any way to add the rule action in the alert?
From: waldo kitty <wkitty42 () windstream net>
Date: Mon, 15 Jul 2013 16:20:51 -0400
On 7/15/2013 15:56, Avery Rozar wrote:
I would like to have the term "drop" or "dropped" in the Alert, is this possible?
in the alert message text? yes, it is possible but you have to edit all enabled
rules to put it in the msg:"message text here"; field in the rules...
--
NOTE: No off-list assistance is given without prior approval.
Please keep mailing list traffic on the list unless
private contact is specifically requested and granted.
------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Is there any way to add the rule action in the alert? Avery Rozar (Jul 15)
- Re: Is there any way to add the rule action in the alert? waldo kitty (Jul 15)
- Re: Is there any way to add the rule action in the alert? Avery Rozar (Jul 15)
- Re: Is there any way to add the rule action in the alert? waldo kitty (Jul 15)
