Re: question

[Joel Esler <jesler () sourcefire com>]

If you have edited one of the VRT rules and did not change the sid, then yes, pulledpork will override your changes, 
unless you put it in local.rules.


If you make a modification to one of the VRT rule, I suggest moving a copy of the rule to local.rules and numbering the 
sid to 1 million+

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire

On Oct 1, 2012, at 5:10 PM, "Thomas, Sheena (RTIS)" <sthomas () reedtech com> wrote:

> When downloading new rules will they override existing customized rules?
>  
> Thanks in advance!
>  
> Sheena Thomas
> Information Security Analyst 1
>  
> Reed Technology and Information Service Inc.
> Transforming Data, Delivering Information™
> 7 Walnut Grove Drive - Horsham, PA 19044
> Office: 215-441-6412 - Mobile: 267-586-9042
> www.ReedTech.com – sthomas () ReedTech com
>  
> ------------------------------------------------------------------------------
> Got visibility?
> Most devs has no idea what their production app looks like.
> Find out how fast your code is with AppDynamics Lite.
> http://ad.doubleclick.net/clk;262219671;13503038;y?
> http://info.appdynamics.com/FreeJavaPerformanceDownload.html_______________________________________________
> Snort-sigs mailing list
> Snort-sigs () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
>
>
> Please visit http://blog.snort.org for the latest news about Snort!

------------------------------------------------------------------------------
Got visibility?
Most devs has no idea what their production app looks like.
Find out how fast your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219671;13503038;y?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!