Snort mailing list archives
Re: How do you keep customized rules updated?
From: Nigel Houghton <nigel () sourcefire com>
Date: Wed, 21 Feb 2007 10:15:12 -0500
On 0, OlRoy OlRoy <olroy1212 () yahoo com> wrote:
Hello group, Oinkmaster seems great if you haven't spent any time customizing the rules. However, if you have spent a lot of time customizing Snort rules for your environment (deleted and modified rules), then what is the best way to keep the rule set updated? How exactly are you guys doing it?
By using Oinkmaster and making suitable configuration changes to preserve whatever you have done with the rule set and configuration files. -- Nigel Houghton Office Linebacker SF VRT "Those who say it can't be done, should get out of the way of those doing it" ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How do you keep customized rules updated? OlRoy OlRoy (Feb 21)
- Re: How do you keep customized rules updated? Steve Bernacki (Feb 21)
- Re: How do you keep customized rules updated? Alex Butcher (Feb 22)
- Re: How do you keep customized rules updated? Nigel Houghton (Feb 21)
- Re: How do you keep customized rules updated? Jeff Dell (Feb 21)
- Re: How do you keep customized rules updated? Steve Bernacki (Feb 21)