Snort mailing list archives
RE: Updating Rules?
From: Paul Schmehl <pauls () utdallas edu>
Date: Thu, 12 Feb 2004 15:59:37 -0600
--On Thursday, February 12, 2004 01:04:11 PM -0800 "Vines Scott D 2d Lt AFFTC/IT" <Scott.Vines () edwards af mil> wrote:
While we're on the subject of updating rules: I have customized my own rule files by disabling certain alerts within the files (but not turning off the entire rule set)...is there a graceful way to update rules without having to turn these off again?
Yes. Oinkmaster. Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer The University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Updating Rules? Dusty Hall (Feb 12)
- Re: Updating Rules? Andreas Östling (Feb 12)
- <Possible follow-ups>
- RE: Updating Rules? Vines Scott D 2d Lt AFFTC/IT (Feb 12)
- Re: Updating Rules? Andy Richter (Feb 12)
- RE: Updating Rules? Paul Schmehl (Feb 12)
- RE: Updating Rules? AJ Butcher, Information Systems and Computing (Mar 25)
- RE: Updating Rules? John Creegan (Feb 12)
- Re: Updating Rules? Dusty Hall (Feb 12)
- Re: Updating Rules? Paul Schmehl (Feb 12)