[sentinix-list] Alerts for rules not activated

"John Somm" <John.Somm-KXIVFIctkMV/[email protected]> Thu, 22 Apr 2004 16:22:04 -0700
Newsgroups gmane.linux.sentinix
Message-ID <[email protected]>
Greetings,

I am experiencing some odd behavior of Snort rules in Sentinix. Manually
editing the config's in /usr/local/snort/sensor/rules works fine. 

However, when editing the rule set via the web gui, if I deactivate a
rule, and then view the alerts in the acid/alert console, I am still
getting alerts for those rules I have deactivated. 

Has anyone else seen this behavior?

Is this a bug in Sentinix or am I (more likely) doing something wrong?

Thanks in advance,

-John