Snort mailing list archives
Re: snortcenter include commands
From: Joel Esler <eslerj () gmail com>
Date: Tue, 24 May 2005 15:58:23 -0400
Theoretically, Snort thinks it's all one file. So you're right in both directions :) On 5/24/05, East, Bill <eastb () pffcu org> wrote:
Trying to get all the old rules loaded. I have seen that I can pull the rules files in with the Import command so that might be the best way to go. I guess I'm just used to having the single, short config file and the rules broken out by filename. The real problem may be my reluctance to adapt to changes. -- be - MOS Leela: Oh, Adelai, I've had a wonderful time today. No one's stared at me, or avoided staring at me, or tried to burn me. You make me feel so not weird.-----Original Message----- From: Jason Alexander [mailto:lists () itsecurity3 its uiowa edu] Sent: Tuesday, May 24, 2005 11:44 AM To: East, Bill Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] snortcenter include commands Bill, What are you trying to do here. Are you trying to import your old config into snortcenter as a catagory, or are you just trying to get all the old rules loaded. If you want to do some hand tuning you can add a $RULE_PATH and put a file on your sensor that gets included and it should work fine if you just want to have your old rules as a baseline. Jason East, Bill wrote:I'd like to replicate my old snort config while using snortcenter. The old snort.conf had include $RULE_PATH/whatever.rules How would I go about getting this into snortcenter'sconfig? I'm surethe answer will make me feel beyond dopey.------------------------------------------------------- This SF.Net email is sponsored by Yahoo. Introducing Yahoo! Search Developer Network - Create apps using Yahoo! Search APIs Find out how you can build Yahoo! directly into your own Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Joel Esler BASE Project Lead http://sourceforge.net/projects/secureideas ------------------------------------------------------- This SF.Net email is sponsored by Yahoo. Introducing Yahoo! Search Developer Network - Create apps using Yahoo! Search APIs Find out how you can build Yahoo! directly into your own Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snortcenter include commands East, Bill (May 23)
- Re: snortcenter include commands Jason Alexander (May 24)
- <Possible follow-ups>
- RE: snortcenter include commands East, Bill (May 24)
- Re: snortcenter include commands Joel Esler (May 24)