Snort mailing list archives
Re: question
From: Joel Esler <jesler () sourcefire com>
Date: Mon, 1 Oct 2012 17:24:19 -0400
If you have edited one of the VRT rules and did not change the sid, then yes, pulledpork will override your changes, unless you put it in local.rules. If you make a modification to one of the VRT rule, I suggest moving a copy of the rule to local.rules and numbering the sid to 1 million+ -- Joel Esler Senior Research Engineer, VRT OpenSource Community Manager Sourcefire On Oct 1, 2012, at 5:10 PM, "Thomas, Sheena (RTIS)" <sthomas () reedtech com> wrote:
When downloading new rules will they override existing customized rules? Thanks in advance! Sheena Thomas Information Security Analyst 1 Reed Technology and Information Service Inc. Transforming Data, Delivering Information™ 7 Walnut Grove Drive - Horsham, PA 19044 Office: 215-441-6412 - Mobile: 267-586-9042 www.ReedTech.com – sthomas () ReedTech com ------------------------------------------------------------------------------ Got visibility? Most devs has no idea what their production app looks like. Find out how fast your code is with AppDynamics Lite. http://ad.doubleclick.net/clk;262219671;13503038;y? http://info.appdynamics.com/FreeJavaPerformanceDownload.html_______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
------------------------------------------------------------------------------ Got visibility? Most devs has no idea what their production app looks like. Find out how fast your code is with AppDynamics Lite. http://ad.doubleclick.net/clk;262219671;13503038;y? http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- question Thomas, Sheena (RTIS) (Oct 01)
- Re: question JJ Cummings (Oct 01)
- Re: question Thomas, Sheena (RTIS) (Oct 01)
- Re: question Joel Esler (Oct 01)
- Re: question lists () packetmail net (Oct 01)
- Re: question Alain Zidouemba (Oct 02)
- Re: question JJ Cummings (Oct 01)