Re: Snort-users Digest, Vol 37, Issue 18

[Joel Esler <jesler () sourcefire com>]

On Jun 15, 2009, at 9:10 PM, Pedro Marinho wrote:

> Joel,
>
> Ok thank you. I am not running a lot of rules. I am running this  
> rules on that sensor.
>
> include $RULE_PATH/bad-traffic.rules
> include $RULE_PATH/exploit.rules
> include $RULE_PATH/scan.rules
> include $RULE_PATH/finger.rules
> include $RULE_PATH/ftp.rules
> include $RULE_PATH/telnet.rules
> include $RULE_PATH/rpc.rules
> include $RULE_PATH/rservices.rules
> include $RULE_PATH/dns.rules
> include $RULE_PATH/tftp.rules
> include $RULE_PATH/web-coldfusion.rules
> include $RULE_PATH/web-iis.rules
> include $RULE_PATH/web-frontpage.rules
> include $RULE_PATH/web-misc.rules
> include $RULE_PATH/sql.rules
> include $RULE_PATH/netbios.rules
> include $RULE_PATH/misc.rules
> include $RULE_PATH/attack-responses.rules
> include $RULE_PATH/mysql.rules
> include $RULE_PATH/smtp.rules
> include $RULE_PATH/info.rules
> include $RULE_PATH/emerging-virus.rules
> include $RULE_PATH/emerging-policy.rules
> include $RULE_PATH/emerging.rules


That last line..  emerging.rules..  isn't that ALL the rules that  
emerging has?

--
joel esler | Sourcefire | gtalk: jesler () sourcefire com | 302-223-5974
[m]

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users