Re: parsing the rules

["Keith W. McCammon" <mccammon () gmail com>]

Snort.conf is the configuration file used by Snort, within which the
various .rules files are included.  Thus, snort.conf is parsed for a
variety of configuration directives (including rules) when the engine
is started in IDS mode.  Because of the nature of includes, the .rules
files are parsed as part of snort.conf.  If you wanted to, you could
add your rules to snort.conf directly (although you'd have a mess on
your hands).

----- Original Message -----
From: snort user <snort_user2004 () yahoo com>
Date: Fri, 27 Aug 2004 13:45:21 -0700 (PDT)
Subject: [Snort-users] parsing the rules
To: snort-devel () lists sourceforge net, user <snort-users () lists sourceforge net>


i ran snort in the ids mode and one thing confusing. it says "Parsing
Rules file snort.config" . i thought the config file has a pointer to
the rules directory. could someone please help me with this. i was
also going thru the code and found a function call to
ParseRulesFile(pv.config). any help will be appreciated.
  
thanks. 

 ________________________________
Do you Yahoo!?
 New and Improved Yahoo! Mail - Send 10MB messages!


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users