Home page logo

snort logo Snort mailing list archives

Re: Clarification on so_rules
From: waldo kitty <wkitty42 () windstream net>
Date: Sat, 10 Aug 2013 01:57:26 -0400

On 8/9/2013 12:07, James Lay wrote:
I use pulledpork, so instead, /opt/etc/rules/so_rules/so_rules.rules is
created...so far so good.  My question is, what happens with the actual
.so files?  Do I delete them..move them...something else?  Thanks for
any insight.

just to add... no, you cannot remove the binary so rules files... the stubs that 
are generated are just that, textual stubs... the binaries are still required...

the thing about the stubs is that you can comment out one of them to disable 
that rules just like commenting out one of the normal textual rules...

NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]