Snort mailing list archives
Re: Snort not seeing my local rules
From: wkitty42 () windstream net
Date: Sun, 26 Feb 2017 12:51:35 -0500
On 02/26/2017 11:56 AM, wkitty42 () windstream net wrote:
generally speaking, the file is named local.rules and is stored in the same directory as all your other rules... they also need to be in proper format including the msg, content, sid and rev sections... what do your rules look like?
oh and classtype, too... -- NOTE: No off-list assistance is given without prior approval. *Please keep mailing list traffic on the list* unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Snort not seeing my local rules Dawit Admassu (Feb 26)
- Re: Snort not seeing my local rules wkitty42 (Feb 26)
- Re: Snort not seeing my local rules wkitty42 (Feb 26)
- Re: Snort not seeing my local rules wkitty42 (Feb 26)