next up previous contents
Next: Event Processing Up: Decoder and Preprocessor Rules Previous: Configuring   Contents

Reverting to original behavior

The following config option in snort.conf will make Snort revert to the old behavior:

    config autogenerate_preprocessor_decoder_rules

Note that if you want to revert to the old behavior, you also have to remove the decoder and preprocessor rules and any reference to them from snort.conf, otherwise they will be loaded. This option applies to rules not specified and the default behavior is to alert.



Eugene Misnik 2013-05-08