Rule States/Action - Snort Version 2 versus Snort Version 3

[Meddane]

Rule States/Action - Snort Version 2 versus Snort Version 3

Snort 3 calls this rule Action.

Snort 2 calls this rule State

Snort 2 rule states:

1. Generate Events
2. Drop and Generate Events
3. Disable

 Snort 2 custom rules can also be created using the Pass action. To use Pass action, you need to set the state to Generate Events.

Snort 3 rule actions:

1. Alert
2. Block
3. Drop
4. Rewrite
5. Pass
6. Reject