Snort mailing list archives

Re: Rules


From: Matt Kettler <mkettler () evi-inc com>
Date: Tue, 23 Dec 2003 10:30:33 -0500

At 08:34 AM 12/23/2003, Gerson Sampaio wrote:
Hi List,
I'd like to know the best way to update my rules.
I'm using flexresp and don't want to rewrite them.

I'd suggest looking at oinkmaster.. it's a pretty handy rule-management tool... at least a lot of people on the list like it a lot.


However, even oinkmaster isn't going to be able to auto-update the rules you've edited to have flexresp's.. those rules you'll have to hand update.. but it can update the other rules in the same file...

http://oinkmaster.sourceforge.net/


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: