Re: Pulledpork does not apply policies to Snort registered rules

["Joel Esler (jesler)" <jesler () cisco com>]

Interesting.  Have you filled an issue with pulledpork on the github for the project?

Shirkdog may not be monitoring this list all the time.


> On Jul 29, 2016, at 8:06 AM, Asad, Hafiz ul <Hafiz-ul.Asad () city ac uk> wrote:
>
> Snort Users,
>
> I have been trying to compare results of different snort rules with different policies; 
> Connectivity;Security;Balanced;No-policy. While setting these for downloading different community rules using 
> Pulledpork, I was able to download different sets of rules for each policy.However, I have noticed, that setting up 
> different policies in the "pulledpork.conf" file does not have any effect on the downloaded rules for "Snort 
> Registered" Rule set (Every time the downloaded rules remain the same no matter what policy is set in the file). Is 
> there any explanation for this from the Pulledpork point of view?
>
> Cheers,
> Asad
>
> Hafiz ul Asad
> Research Assistant
> Center for Software Reliability
> School of Mathematics,  Computer Science & Engineering
> City University London, EC1V 0HB London
> Tel : +44 (0) 20 7040 8422
> ------------------------------------------------------------------------------
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net <mailto:Snort-users () lists sourceforge net>
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users <https://lists.sourceforge.net/lists/listinfo/snort-users>
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users 
> <http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users>
>
> Please visit http://blog.snort.org <http://blog.snort.org/> to stay current on all the latest Snort news!

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!