Snort mailing list archives

I have written a Linux shell script to enable all Snort rules which were commented out


From: Teo En Ming <teo.en.ming () gmail com>
Date: Tue, 8 Apr 2014 06:04:52 +0800

Dear List,

Originally, I had wanted to use Pulled Pork to enable all Snort rules which
were commented out/disabled. But there is no comprehensive guide/manual on
Pulled Pork which covers every step. So I thought better and decided to
write a very simple Linux shell script to un-comment/enable all the Snort
rules which were commented out/disabled. The source code only consists of a
few lines.

===Start of Linux Shell Script===
#!/bin/sh
# Linux shell script: enable-all-snort-rules.sh
# Written by: Teo En Ming
# Email: teo.en.ming () gmail com
# Date: 8 April 2014 Tuesday 5:17 A.M. Singapore Time
# Version: 1.0

RULE_PATH=/etc/snort/rules

cd $RULE_PATH

for i in `ls -1 $RULE_PATH`
do
      echo "Enabling all Snort rules in $i"
      sed -i 's/^# //g' $i
done
===End of Linux Shell Script===

Use the program at your own risk! I assume no responsibility if you screw
up your Snort installation. I tried to un-comment all the Snort rules and
Snort couldn't start. Some enabled rules are preventing Snort from
starting. Somebody please advise.

Regards,

Teo En Ming
------------------------------------------------------------------------------
Put Bad Developers to Shame
Dominate Development with Jenkins Continuous Integration
Continuously Automate Build, Test & Deployment 
Start a new project now. Try Jenkins in the cloud.
http://p.sf.net/sfu/13600_Cloudbees
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: