Snort mailing list archives
Why PulledPork over Oinkmaster
From: "Michael Steele" <michaels () winsnort com>
Date: Wed, 26 Sep 2012 13:20:00 -0400
Joel, Is there anything written up on why we should be using PulledPork over Oinkmaster, or over manually updating? There may be something on the blog about this? All this should be fairly easy for JJ to place on the blog, if it's not there? Kindest regards, Michael... -----Original Message----- From: Joel Esler [mailto:jesler () sourcefire com] Sent: Wednesday, September 26, 2012 12:29 PM To: AllowOverride Cc: snort-users Subject: Re: [Snort-users] Barnyard2 - v2-1.10 is released Oinkmaster and barnyard are two different things. Oinkmaster updates rules. Barnyard2 processes Snort's output. On Sep 26, 2012, at 12:26 PM, AllowOverride <allowoverride () gmail com> wrote:
Hello Firnsy folks, quick question: it's been interesting to exactly how interact barnyard interacts with snort, and curious why it was chosen over oinkmaster as the preferred method. I have noticed that usually if a product is incorporated with another, they would have a basic config file that mirrors the file paths, rather than it be say manually configed inside the conf, or in commandline options when run. So, I wonder if you could pass this to the devs and ask if they can try to make it Easier to install with the snort source attained from snort.org. I mean, they state its preferred now over oinkmaster, however, it its not a seemless install. yes I understand linux/unix FS but for it to be much quicker and easier to install with snort would be great! meaning, paths match the same as the snort-2.9.3.1 for example version. also, there is the same issue with pulledpork. paths are all over the place. both snort, and PP, and yes Barnyard2-firnsy the paths can be cumbersome to finagle for first or even 2nd time users. just a heads up, it's not simple and takes days especially when trying to auto script snort, PP, and BY to all work together. pass this on to a friend, thanks, pete
------------------------------------------------------------------------------ How fast is your code? 3 out of 4 devs don\\\'t know how their code performs in production. Find out how slow your code is with AppDynamics Lite. http://ad.doubleclick.net/clk;262219672;13503038;z? http://info.appdynamics.com/FreeJavaPerformanceDownload.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Why PulledPork over Oinkmaster Michael Steele (Sep 26)
- Re: Why PulledPork over Oinkmaster Joel Esler (Sep 26)