Rule Modify - Alcatel-Lucent OmniAccess 700 CLI Command Reference Manual

RULE MODIFY

rule modify <1-4294967295> content <rule-content>
D
ESCRIPTION
This command is used in the Intrusion Snort Configuration mode. Use this
command to modify Snort rule.
P
ARAMETER
1-4294967295
rule-content
E
XAMPLE
To modify the rule given below, use the rule modify command:
Original rule: alert tcp $HOME_NET any -> $EXTERNAL_NET any
(msg:"ATTACK-RESPONSES directory listing";
flow:from_server,established; content:"Volume Serial
Number"; classtype:bad-unknown; sid:1292; rev:8;)
Modification of rule to $EXTERNAL_NET is shown below:
ALU(config-firewall-intrusion-snort)#rule modify 1292
content alert tcp $EXTERNAL_NET any -> $EXTERNAL_NET any
(msg:"ATTACK-RESPONSES directory listing";
flow:from_server,established; content:"Volume Serial
Number"; classtype:bad-unknown; sid:1292; rev:8;)
OmniAccess 700 CLI Command Reference Guide
Beta
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
Parameter
Alcatel-Lucent
Description
Snort rule ID.
The modified rule content.
Beta
rule modify
717