Re: Enabling all the rules for testing using PulledPork?

[JJ Cummings <cummingsj () gmail com>]

In enablesid you should literally be able to just use a . To wildcard... It's a pcre just looking for a match, not a 
switch...

Sent from the iRoad

> On Sep 24, 2013, at 16:15, Joel Esler <jesler () sourcefire com> wrote:
>
> s/^#\ alert/alert/g
>
> I don’t know the pulledpork syntax for it..
>
> > On Sep 24, 2013, at 4:18 PM, Michael Steele <michaels () winsnort com> wrote:
> >
> > Just to be clear I’m going to add the below line to my enabledsid.conf file?
> >  
> > PCRE wildcard "."
> >  
> > Best regards,
> > Michael...
> >  
> > From: pulledpork-users () googlegroups com [mailto:pulledpork-users () googlegroups com] On Behalf Of JJ Cummings
> > Sent: Tuesday, September 24, 2013 2:56 PM
> > To: pulledpork-users () googlegroups com
> > Cc: <pulledpork-users () googlegroups com>; <snort-users () lists sourceforge net>
> > Subject: Re: Enabling all the rules for testing using PulledPork?
> >  
> > PCRE wildcard "." In enablesid
> >
> > Sent from the iRoad
> >
> > On Sep 24, 2013, at 11:07, "Michael Steele" <michaels () go2dds com> wrote:
> >
> > Is there a way to easily enable all the rules using PulledPork
> >  
> > Best regards,
> > Michael
> >  
> >  
> > -- 
> > You received this message because you are subscribed to the Google Groups "pulledpork users" group.
> > To unsubscribe from this group and stop receiving emails from it, send an email to pulledpork-users+unsubscribe () 
> > googlegroups com.
> > To post to this group, send email to pulledpork-users () googlegroups com.
> > Visit this group at http://groups.google.com/group/pulledpork-users.
> > For more options, visit https://groups.google.com/groups/opt_out.
> > -- 
> > You received this message because you are subscribed to the Google Groups "pulledpork users" group.
> > To unsubscribe from this group and stop receiving emails from it, send an email to pulledpork-users+unsubscribe () 
> > googlegroups com.
> > To post to this group, send email to pulledpork-users () googlegroups com.
> > Visit this group at http://groups.google.com/group/pulledpork-users.
> > For more options, visit https://groups.google.com/groups/opt_out.
> > ------------------------------------------------------------------------------
> > October Webinars: Code for Performance
> > Free Intel webinars can help you accelerate application performance.
> > Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
> > the latest Intel processors and coprocessors. See abstracts and register >
> > http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk_______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest Snort news!
>
> ------------------------------------------------------------------------------
> October Webinars: Code for Performance
> Free Intel webinars can help you accelerate application performance.
> Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
> the latest Intel processors and coprocessors. See abstracts and register >
> http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!