Snort mailing list archives
Re: rule sets on CVS
From: Ramin Alidousti <ramin () cannon eng us uu net>
Date: Wed, 5 Sep 2001 20:50:39 -0400
On Wed, Sep 05, 2001 at 05:12:25PM -0700, Bob Van Cleef wrote:
I would like to set up a script to routinely download and replace the rule sets. Has anyone else done so?
Excuse my paranoia but is it wise to do so? How difficult is it to poison such a download? Maybe it's impossible; I've not thought about it thoroughly but just the idea of an automatic replacement of such an important thing seems scary to me. Ramin
Looking at the cvs source, I have a couple of observations about the rule sets. 1 - they are all in the top directory, which after the build has 286 files in it... of which 28 have the suffix .rules. 2 - there is no Makefile option to install them anywhere It would be nice to be able to run a CVS update, followed by a 'make install' that actually changed the EXTERNAL/INTERNAL variables and placed the results in the correct directory. Bob
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- rule sets on CVS Bob Van Cleef (Sep 05)
- Re: rule sets on CVS Ramin Alidousti (Sep 05)
- Re: rule sets on CVS Bob Van Cleef (Sep 06)
- Re: rule sets on CVS Andreas Östling (Sep 06)
- Re: rule sets on CVS Ramin Alidousti (Sep 05)