Re: Active Rules & Management

[Xander <reg.regedit () gmail com>]

2015-06-11 11:22 GMT+02:00 waldo kitty <wkitty42 () windstream net>:

> you /have/ to tune snort to your network... some rules will apply to your
> network and others will be nothing more than noise generators...

Thanks for your response!

By noise generators, you mean that they could actually interfere with
the other rules?
Like preventing detection or generating false positives and son on?

Or you just mean that packets will be checked against them uselessly
(since they do not apply to my network), therefore wasting resources?

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!