Snort mailing list archives
rules update script and consistency
From: <adulau-snort () colorado g-inter net>
Date: Tue, 2 Oct 2001 08:21:28 +0200 (CEST)
Hello All,
Here it is my trouble, I want to update automatically my rules set without
having to change back my false-positive removed rules.
I have seen this scripts, snort-update. Snort-update is doing only a diff
of the existing rules and send a mail for doing manually the mv.
I plan to do a script like that :
-> Concentrate all the rules, in one files.
-> Make modification with using this script (or the script via Webmin).
The script keep two files : one activated rule list and one
desactivated rule list.
-> When i get snort rule from snort.org or from whitewhats, it's generate
a new activated rule list and remove the entry available in desactivated
rule list.
-> So we have new rules but the already desactivated rules...
Is there any script like that for the moment, or i need to do it ?
(To not do the work 2 times 8-))
Thanks a lot
Alexandre Dulaunoy
--
http://www.foo.be/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- rules update script and consistency adulau-snort (Oct 01)
