Re: Whats Rules should i use

[Chris Green <cmg () uab edu>]

Kenny D <bitored2002 () yahoo com au> writes:

> Hi,
>
> I am new to snort and have successfully set it up with
> IDScenter, so far so good. However i have one
> question, is all the rules in the standard install
> adequate or is there something else i should be
> looking out for. Would the standard rules (excluding
> those hashed out) fit most peoples needs.

They will be full of high false positives for certain environments.

You can also subscribe to snort-sigs for up to the date signature
developements :)

-- 
Chris Green <cmg () uab edu>
Fame may be fleeting but obscurity is forever.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users