Home page logo

snort logo Snort mailing list archives

Re: Different bpf filter for every multiple config used in snort
From: Eoin Miller <eoin.miller () trojanedbinaries com>
Date: Fri, 17 May 2013 19:12:09 +0000

On 5/17/2013 15:09, C. L. Martinez wrote:
Hi all,

 Is it possible to use one bpf filter config file for every multiple
config in snort


I always created a skeleton conf file and the custom conf file that I
would call when starting the process.

snort -c /etc/snort/customized_snort.conf

And then inside of customized_snort.conf you can have:

include /etc/snort/skelton_snort.conf

That way you just put in the variables that change for your instances
you are running in the small conf and don't have to edit the N-number of
conf's every time to setup something different.

-- Eoin

AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]