Snort mailing list archives
Re: Snorby SBSA
From: "Jefferson, Shawn" <Shawn.Jefferson () bcferries com>
Date: Fri, 27 Aug 2010 11:15:36 -0600
Not exactly at the same time, but with separate configs... and you need to have your configs setup properly so that pulledpork creates the sid-msg.map by merging the two runs-by specifying the rule files as "local" rule files. There are a few things that pulledpork does different (and some of them automatically!) than oinkmaster, but once you figure that out, pulledpork is awesome. -----Original Message----- From: Joel Esler [mailto:jesler () sourcefire com] Sent: Friday, August 27, 2010 8:51 AM To: Christopher A. Libby Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Snorby SBSA Pulledpork will handle both ET and VRT rules at the same time, plus SO. ------------------------------------------------------------------------------ Sell apps to millions through the Intel(R) Atom(Tm) Developer Program Be part of this innovative community and reach millions of netbook users worldwide. Take advantage of special opportunities to increase revenue and speed time-to-market. Join now, and jumpstart your future. http://p.sf.net/sfu/intel-atom-d2d _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snorby SBSA Christopher A. Libby (Aug 27)
- Re: Snorby SBSA Joel Esler (Aug 27)
- Re: Snorby SBSA Jefferson, Shawn (Aug 27)
- Re: Snorby SBSA JJ Cummings (Aug 27)
- Re: Snorby SBSA Jefferson, Shawn (Aug 27)
- Re: Snorby SBSA Castle, Shane (Aug 27)
- Re: Snorby SBSA JJ Cummings (Aug 27)
- Re: Snorby SBSA Castle, Shane (Aug 27)
- Re: Snorby SBSA beenph (Aug 27)
- Re: Snorby SBSA waldo kitty (Aug 27)
- Re: Snorby SBSA JJ Cummings (Aug 27)
- Re: Snorby SBSA Joel Esler (Aug 27)