[sentinix-list] Alerts for rules not activated
"John Somm" <John.Somm-KXIVFIctkMV/[email protected]> Thu, 22 Apr 2004 16:22:04 -0700
| Newsgroups | gmane.linux.sentinix |
|---|---|
| Message-ID | <[email protected]> |
Greetings, I am experiencing some odd behavior of Snort rules in Sentinix. Manually editing the config's in /usr/local/snort/sensor/rules works fine. However, when editing the rule set via the web gui, if I deactivate a rule, and then view the alerts in the acid/alert console, I am still getting alerts for those rules I have deactivated. Has anyone else seen this behavior? Is this a bug in Sentinix or am I (more likely) doing something wrong? Thanks in advance, -John