Snort mailing list archives

Re: open-test.conf


From: waldo kitty <wkitty42 () windstream net>
Date: Tue, 27 Nov 2012 18:51:03 -0500

On 11/27/2012 15:46, Y M wrote:
The best way to enable rules (uncomment) and keep track of enabled, disabled,
modified, drop sids is to use PulledPork.

or oinkmaster and its config where you can specify enablesid, disablesid or even 
modifysid...

don't forget that pulledpork started as oinkmaster once upon a time ;)

With PulledPork, you use policy,

policies are only one aspect... you can still use the above mentioned enablesid, 
disablesid and modifysid with pulledpork unless i've misread/misunderstood 
something over these last months...


------------------------------------------------------------------------------
Keep yourself connected to Go Parallel: 
DESIGN Expert tips on starting your parallel project right.
http://goparallel.sourceforge.net
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: