Re: On tuning the Rules

[Nigel Houghton <nhoughton () sourcefire com>]

On Mon, Oct 26, 2009 at 7:28 AM, Shashi.P <p.shashii () gmail com> wrote:
> hi,
>
> I am fresher to Snort. I have installed Snort 2.8.4 on Fedora. Now it
> is working fine. And also i have downloded rules and put in to
> /etc/snort.
>
> now i need to tune. Is there any website to get rules which are already tuned.
>
> please let us know.
>
> thanks and regards.
> Shashi
>
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry(R) Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart your
> developing skills, take BlackBerry mobile applications to market and stay
> ahead of the curve. Join us from November 9 - 12, 2009. Register now!
> http://p.sf.net/sfu/devconference
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


All the VRT Certified rules from snort.org come pre-tuned. Just not
for your particular network circumstances.

Seriously though, this is something you have to do yourself. Only you
know what is on your network and what you are concerned with. You are
the only one who can do the tuning.

-- 
Nigel Houghton
Head Mentalist
SF VRT
http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users