Snort mailing list archives
I have written a Linux shell script to enable all Snort rules which were commented out
From: Teo En Ming <teo.en.ming () gmail com>
Date: Tue, 8 Apr 2014 06:04:52 +0800
Dear List,
Originally, I had wanted to use Pulled Pork to enable all Snort rules which
were commented out/disabled. But there is no comprehensive guide/manual on
Pulled Pork which covers every step. So I thought better and decided to
write a very simple Linux shell script to un-comment/enable all the Snort
rules which were commented out/disabled. The source code only consists of a
few lines.
===Start of Linux Shell Script===
#!/bin/sh
# Linux shell script: enable-all-snort-rules.sh
# Written by: Teo En Ming
# Email: teo.en.ming () gmail com
# Date: 8 April 2014 Tuesday 5:17 A.M. Singapore Time
# Version: 1.0
RULE_PATH=/etc/snort/rules
cd $RULE_PATH
for i in `ls -1 $RULE_PATH`
do
echo "Enabling all Snort rules in $i"
sed -i 's/^# //g' $i
done
===End of Linux Shell Script===
Use the program at your own risk! I assume no responsibility if you screw
up your Snort installation. I tried to un-comment all the Snort rules and
Snort couldn't start. Some enabled rules are preventing Snort from
starting. Somebody please advise.
Regards,
Teo En Ming
------------------------------------------------------------------------------ Put Bad Developers to Shame Dominate Development with Jenkins Continuous Integration Continuously Automate Build, Test & Deployment Start a new project now. Try Jenkins in the cloud. http://p.sf.net/sfu/13600_Cloudbees
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- I have written a Linux shell script to enable all Snort rules which were commented out Teo En Ming (Apr 07)
