Snort mailing list archives

RE: RE: var HOME_NET and rule updates


From: "Daniel Lopez" <dlopez () tct hut fi>
Date: Fri, 26 Jul 2002 19:30:13 +0300

Thanks for your help! :)

Last question [sorry! :( ], I downloaded last version 1.8.7 and the
snort rulesets.
My question is how do I update rules?

By hand.  The hard way.

Once you start customizing the rules to work for you, it gets
real hard to update the rules.
I used to do it by hand, no I use Demarc Puresecure (a
commercial product)
and it updates rules automagically.


Because I'm testing Snort, I think I will let the rules as they are. I
won't customize them or comment such or such rule in the rule file.
Thus, if I want to use the new rulesets, do I have to copy all the new
rules inside the default directory or only change the RULE_PATH
variable?

Daniel



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: