Snort3 Filter Problem

I'm running Snort3-3.1.64.0. I've added three gid:sids to snort.lua:



I've apparently done something wrong because they aren't being filtered:



This is the snort3.service file:



Can someone please tell me what I'm doing wrong? I'm getting a ton of 
output and really need to thin the herd. Note: I run a shell script to 
change "alert" in pulledpork.rules to "drop."

Thank you,

Jim Campbell

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette