Snort mailing list archives

Re: pulled pork


From: Jason Wallace <jason.r.wallace () gmail com>
Date: Sat, 5 Mar 2011 00:28:21 -0500

Michael,

In the pulledpork.conf file there is a section near the beginning of the
file where you can add a list of rule file names to ignore.

Thx,
Wally

On Mar 4, 2011 11:04 PM, "Michael Lubinski" <michael.lubinski () gmail com>
wrote:
If I am not mistaken pulled pork combines the rules into a snort.rules
file
so the rest of the rules for snort should be commented out except for
snort.rules.

If that is correct I have another question, the block rules from ET are
contained within that snort.rules, i get an unknown rule option for fwsam
which I am not running. What option do I have to modify in pulledpork.conf
to have it not bull these block rules down?
------------------------------------------------------------------------------
What You Don't Know About Data Connectivity CAN Hurt You
This paper provides an overview of data connectivity, details
its effect on application quality, and explores various alternative
solutions. http://p.sf.net/sfu/progress-d2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: