Snort mailing list archives
Re: parsing the rules
From: "Keith W. McCammon" <mccammon () gmail com>
Date: Fri, 27 Aug 2004 17:16:31 -0400
Snort.conf is the configuration file used by Snort, within which the various .rules files are included. Thus, snort.conf is parsed for a variety of configuration directives (including rules) when the engine is started in IDS mode. Because of the nature of includes, the .rules files are parsed as part of snort.conf. If you wanted to, you could add your rules to snort.conf directly (although you'd have a mess on your hands). ----- Original Message ----- From: snort user <snort_user2004 () yahoo com> Date: Fri, 27 Aug 2004 13:45:21 -0700 (PDT) Subject: [Snort-users] parsing the rules To: snort-devel () lists sourceforge net, user <snort-users () lists sourceforge net> i ran snort in the ids mode and one thing confusing. it says "Parsing Rules file snort.config" . i thought the config file has a pointer to the rules directory. could someone please help me with this. i was also going thru the code and found a function call to ParseRulesFile(pv.config). any help will be appreciated. thanks. ________________________________ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages! ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- parsing the rules snort user (Aug 27)
- Re: parsing the rules Keith W. McCammon (Aug 27)
- Re: parsing the rules James Riden (Aug 28)