Expiretable snort2c is 1800 instead than 3600 as GUI interface says



  • Hello!

    I'm testing snort package with 1.2 BETA and I saw that blocked offenders hosts "desapaired" before one hour of the snort2c PF table:

    pfctl -rt snort2c -vT show

    Looking at config.xml

    cat /cf/conf/config.xml | grep snort2c

    <command></command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -t 1800 snort2c

    So, I think the expire time is 1800 seconds (a half hour).

    At GUI says one hour …

    Regards,

    Josep Pujadas



  • Thanks, fixed.


Log in to reply