Snort mailing list archives

Re: dynamic (so) rules


From: "Nerijus Krukauskas" <nkrukauskas () gmail com>
Date: Tue, 1 Jul 2008 20:32:58 +0300

On 01/07/2008, chris ryan <chris.ryan () gmx de> wrote:
chris ryan wrote:
Just for curiosity, can anybody explain that to me?

Another related question is why the loaded(!) dynamic rules are not
shown as active, while the corresponding libraries are (the path to the
merged dynamic rules file is totally correct, and there is no error
message at all):
<snip_error_blurb>

  Take a look at the article by Richard Bejtlich:
http://searchsecuritychannel.techtarget.com/tip/0,289483,sid97_gci1299181,00.html.
  And then suit yourself with some drinks
(http://blog.joelesler.net/2008/02/snort-drinking-game-by-erek-adams.html)
as so_rules were already discussed in [snort-users]. Cheers! ;)

-- 
http://nk99.org/

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: