Submit config

Paste your config here. Remember the sid should match the question number. For instance if question 1 asked to match all traffic the config might be:

alert tcp any any -> any any ( sid:1; rev:1; )

Also, bear in mind that rules are processed in sid order, so if your rule 1 matches all traffic then all other rules will fail. You can test your rules one at a time and it will work, but try to get a rules file that works together before submission. If you can't get all of them correct in a single submission please add a comment when you turn in such as:

# please test one at a time