Snort mailing list archives
I have written a Linux shell script to enable all Snort rules which were commented out
From: Teo En Ming <teo.en.ming () gmail com>
Date: Tue, 8 Apr 2014 06:04:52 +0800
Dear List, Originally, I had wanted to use Pulled Pork to enable all Snort rules which were commented out/disabled. But there is no comprehensive guide/manual on Pulled Pork which covers every step. So I thought better and decided to write a very simple Linux shell script to un-comment/enable all the Snort rules which were commented out/disabled. The source code only consists of a few lines. ===Start of Linux Shell Script=== #!/bin/sh # Linux shell script: enable-all-snort-rules.sh # Written by: Teo En Ming # Email: teo.en.ming () gmail com # Date: 8 April 2014 Tuesday 5:17 A.M. Singapore Time # Version: 1.0 RULE_PATH=/etc/snort/rules cd $RULE_PATH for i in `ls -1 $RULE_PATH` do echo "Enabling all Snort rules in $i" sed -i 's/^# //g' $i done ===End of Linux Shell Script=== Use the program at your own risk! I assume no responsibility if you screw up your Snort installation. I tried to un-comment all the Snort rules and Snort couldn't start. Some enabled rules are preventing Snort from starting. Somebody please advise. Regards, Teo En Ming
------------------------------------------------------------------------------ Put Bad Developers to Shame Dominate Development with Jenkins Continuous Integration Continuously Automate Build, Test & Deployment Start a new project now. Try Jenkins in the cloud. http://p.sf.net/sfu/13600_Cloudbees
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- I have written a Linux shell script to enable all Snort rules which were commented out Teo En Ming (Apr 07)