Home page logo
/

snort logo Snort mailing list archives

Re: Only local.rules
From: Y M <snort () outlook com>
Date: Wed, 12 Jun 2013 19:35:59 +0300

If you are using PulledPork (without the -k) and rules get aggregated into snort.rules and so_rules.rules only, then 
you can ignore them from being processed in pulledpork.conf file.
________________________________
From: Nicholas Horton<mailto:fivetenets () me com>
Sent: ‎6/‎12/‎2013 7:16 PM
To: Snort Users<mailto:snort-users () lists sourceforge net>
Subject: [Snort-users] Only local.rules

What's the easiest way to disable all rules (preprocessor, text, so, etc) and only use the local.rules file?

Nick
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]