Re: Snort rules questions

[Brian <bmc () snort org>]

According to Erek Adams:
> On Tue, 2 Oct 2001, Sloan Miller wrote:
> > Sorry about that I should have mentioned that I am running snort on a DSL
> > connection.  This is my home network.  Not a great deal of traffic.  The box
> > is not running X,  it was running apache but I disabled it to free up more
> > RAM to see if there was an effect.  I am running the full set of snort rules
> > from snort.org  If I remember correctly it is over 100 about 108 or so.
>
> Ok, this is wierd.  On my testing/devel box, I'm running the rules from CVS
> and I'm at around 640 or so.   Unless you've pruned already, those numbers
> sound _real_ low.

You both are off by a mile.

By default there are 934 signatures loaded.

There are a total of 1163 signatures available if you enable the
signatures that are disabled by default.

-brian

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users