RE: The order that rules are processed in?

["Schmehl, Paul L" <pauls () utdallas edu>]

Ahhh...thanks Rich.  I was planning on moving all those rules to
local.rules today.  You just saved me some heartache. :-)

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/~pauls/
AVIEN Founding Member 


-----Original Message-----
From: Rich Adamson [mailto:radamson () routers com] 
Sent: Sunday, February 02, 2003 6:24 AM
To: snort-users () lists sourceforge net
Subject: RE: [Snort-users] The order that rules are processed in?



Carefull with that thought... the rules distro includes local.rules but
it's empty (except for comments) and _will_ over-write whatever you've
put in that file.

Rather create a myrules.rules (or something different then the distro)
and put local stuff in there. Whatever you name it, don't forget to add
the filename to snort.conf as well.


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users