Snort mailing list archives

Disabled Rules


From: Spencer Brewer <spencer.brewer () gmail com>
Date: Thu, 7 Jan 2016 08:23:47 -0700

Hi, when PulledPork runs it reports that I have far, far more rules
disabled than enabled.  Is this normal?  I don't have very much in my
disablesid.conf, so I'm just checking with the community to see whether or
not the number if enabled and disabled rules is similar to what everyone
else has.
If these are not controlled through disablesid.conf, is there another place
I should look for disabled rules?

Rule Stats...

                New:-------46

                Deleted:---16

                Enabled Rules:----8330

                Dropped Rules:----0

                Disabled Rules:---19406

                Total Rules:------27736


Thanks
------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: