Snort - the de facto standard for intrusion detection/prevention
next up previous contents
Next: Payload Detection Rule Options Up: Priority Previous: Priority   Contents

Format

priority: <priority integer>;

Figure: Example Priority Rule
\begin{figure}\begin{verbatim}alert TCP any any -> any 80 (msg: ''WEB-MISC phf...
...A+; \
content: ''/cgi-bin/phf''; priority:10;)\end{verbatim}
\par\end{figure}



Steven Sturges 2006-12-08