Re: Clarification on so_rules

[waldo kitty <wkitty42 () windstream net>]

On 8/9/2013 12:07, James Lay wrote:
> I use pulledpork, so instead, /opt/etc/rules/so_rules/so_rules.rules is
> created...so far so good.  My question is, what happens with the actual
> .so files?  Do I delete them..move them...something else?  Thanks for
> any insight.

just to add... no, you cannot remove the binary so rules files... the stubs that 
are generated are just that, textual stubs... the binaries are still required...

the thing about the stubs is that you can comment out one of them to disable 
that rules just like commenting out one of the normal textual rules...

-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!