On Tue, 2003-03-25 at 15:57, Gianni Tedesco wrote: > Firestorm may be respecting the rules order backwards... It is. Try this patch. If 2 rules both matched, firestorm was alerting on the last one not the first one. -- // Gianni Tedesco (gianni at scaramanga dot co dot uk) lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import 8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
Index: src/detect.c
===================================================================
RCS file: /home/scara/cvsroot/firestorm/src/detect.c,v
retrieving revision 1.23
diff -u -r1.23 detect.c
--- src/detect.c 1 Mar 2003 12:05:01 -0000 1.23
+++ src/detect.c 25 Mar 2003 15:58:53 -0000
@@ -51,7 +51,7 @@
if ( n->a ) {
if ( !cur_alert ) {
cur_alert=n->a;
- }else if ( cur_alert->nr > n->a->nr ) {
+ }else if ( cur_alert->nr < n->a->nr ) {
cur_alert=n->a;
}
}
Attachment:
signature.asc
Description: This is a digitally signed message part