Snort mailing list archives

Re: Query about adding Custom Rule Option


From: wkitty42--- via Snort-sigs <snort-sigs () lists snort org>
Date: Fri, 28 Jun 2019 11:09:23 -0400

On 6/27/19 3:58 AM, FAWAD KHAN via Snort-sigs wrote:
Dear Team Snort
i would like to ask you a question for education Purpose. My question is that " How i would add Custom Rule option in Snort, In which file i will be adding it.I will be very Thank full to you for help regarding this matter.


traditionally you add local custom rules to the local.rules file and make sure it is listed in snort.conf so snort can find and load it... you don't have to name it local.rules, though...


--
 NOTE: No off-list assistance is given without prior approval.
       *Please keep mailing list traffic on the list unless*
       *a signed and pre-paid contract is in effect with us.*
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" 
https://snort.org/downloads/#rule-downloads";>emerging threats</a>!


Current thread: