Snort mailing list archives
Re: Snort rules questions
From: Brian <bmc () snort org>
Date: Wed, 3 Oct 2001 12:07:52 -0400
According to Erek Adams:
On Tue, 2 Oct 2001, Sloan Miller wrote:Sorry about that I should have mentioned that I am running snort on a DSL connection. This is my home network. Not a great deal of traffic. The box is not running X, it was running apache but I disabled it to free up more RAM to see if there was an effect. I am running the full set of snort rules from snort.org If I remember correctly it is over 100 about 108 or so.Ok, this is wierd. On my testing/devel box, I'm running the rules from CVS and I'm at around 640 or so. Unless you've pruned already, those numbers sound _real_ low.
You both are off by a mile. By default there are 934 signatures loaded. There are a total of 1163 signatures available if you enable the signatures that are disabled by default. -brian _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort rules questions Sloan Miller (Oct 02)
- Re: Snort rules questions John Sage (Oct 02)
- Re: Snort rules questions Sloan Miller (Oct 02)
- Re: Snort rules questions John Sage (Oct 03)
- Re: Snort rules questions Erek Adams (Oct 03)
- Re: Snort rules questions Sloan Miller (Oct 03)
- Re: Snort rules questions Erek Adams (Oct 03)
- Re: Snort rules questions Brian (Oct 03)
- Re: Snort rules questions Erek Adams (Oct 03)
- Re: Snort rules questions John Sage (Oct 04)
- RE: Snort rules questions Franki (Oct 04)
- Re: Snort rules questions Erek Adams (Oct 04)
- Re: Snort rules questions Sloan Miller (Oct 02)
- Re: Snort rules questions John Sage (Oct 02)