Re: Manageing Rules

[twig les <twigles () yahoo com>]

Oinkmaster is available via the downloads on snort.org
(unix only I believe, but you said you were
switching).  This is from the INSTALL file:


Edit the file oinkmaster.conf.
...
Here you will then also tell Oinkmaster which
  SIDs or files you want to disable or ignore.


--- Gary Hill <ghill () domicilium com> wrote:
> Hi,
>  
> I'm quite new to snort and have a question about
> some rules. 
>  
> I'm running version 1.8 on Win2K :-( (I'll be moving
> to Unix soon) I have my reasons for Win2K at the
> moment.
>  
> Its been running fine for a while and its tuned
> quite well, when I download the new srules I'm sure
> it will overight the current ones and I will have to
> go through them all again and comment out the rules
> I dont want to use.
>  
> Is there a way around this ?
>  
> Is there a notify when a new full set of rules is
> ready for download ?
>  
> Thanks
> N¬HSDM隊X¬²š'²ŠÞu¼’¢êÜxZ+á'µêé®+Ø­Š‰þ
>.)îÅj+•Ò¢g­†)àÙ'ž†Ûiÿü0Âö¬¡ûpj·œ¢d§¢»n±ê왨¥Šx%ŠËRžŠíºÇ«²X¬¶Ë(º·~Šàzw­‹h¶¬Qí¡ÈZž®±êè¦Ø¨žÊ+º{.nÇ+‰·¡¶Úlÿùb²Û,¢êÜyú+éÞ·ùb²Û?–+-ŠwèþÉè®Û¬z»žŠíºÇ«²X¬µªÜ†+ކÛiÿü0¨r¶°•êÜ¢oëyØ«±úa§yb²üžŠíºÇ«


=====
-----------------------------------------------------------
Know yourself and know your enemy and you will never fear defeat.         
-----------------------------------------------------------

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users