Re: Reading rules in snort.conf

[Alex McDonnell <amcdonnell () sourcefire com>]

When you include a rules file it should get read once by Snort when it
starts up and loads the rules.

Alex McDonnell
Cisco TALOS


On Thu, Nov 29, 2018 at 12:16 PM Tasneem Singh via Snort-sigs <
snort-sigs () lists snort org> wrote:

> Hi,
>
> I was wondering how does snort.conf file works in depth? More
> particularly, I’m interested in knowing how often does it read the external
> rule file that I’ve created and included in the main configuration file
> (ie. snort.conf).
>
> I would really appreciate any help.
>
> Thank You.
>
> Best,
> Tasneem
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs () lists snort org
> https://lists.snort.org/mailman/listinfo/snort-sigs
>
> Please visit http://blog.snort.org for the latest news about Snort!
>
> Please follow these rules:
> https://snort.org/faq/what-is-the-mailing-list-etiquette
>
> Visit the Snort.org to subscribe to the official Snort ruleset, make sure
> to stay up to date to catch the most <a href="
> https://snort.org/downloads/#rule-downloads";>emerging threats</a>!
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!