Snort mailing list archives

Re: Snort 2.9.6 and Pulledpork 0.7.0 - so_rules configuration


From: Y M <snort () outlook com>
Date: Mon, 14 Apr 2014 15:43:36 +0000

snort-community/emerging-threats and is generating the snort.rules files.
 
Both of these do not contain the so rules. You would need the registered ruleset to get the so rules.
 
does pulledpork 
also downloads and configures so_rules or do I need to "feed" that 
directory with so_rules for pulledpork process them?
 
If PulledPork is configured to download the registered ruleset, then yes it will get them and copy them to the 
directory you specified.
 
YM
 
Date: Mon, 14 Apr 2014 13:01:24 +0100
From: bma () eurotux com
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort 2.9.6 and Pulledpork 0.7.0 - so_rules    configuration

Hey,

I'm creating some rpms for fast Snort+Pulledpork deployment but I have 
some doubts about how Pulledpork controls snort so_rules.
My pulledpork configuration is managing rules from 
snort-community/emerging-threats and is generating the snort.rules files.

I have sorule_path configured and my doubt comes here, does pulledpork 
also downloads and configures so_rules or do I need to "feed" that 
directory with so_rules for pulledpork process them?

Thanks in advance.

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/NeoTech
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
                                          
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/NeoTech
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: