Snort mailing list archives

Re: Using both Snort registered rules and community rules


From: "Joel Esler \(jesler\) via Snort-users" <snort-users () lists snort org>
Date: Fri, 11 Jan 2019 20:26:21 +0000



On Jan 11, 2019, at 12:45 PM, Black Lion via Snort-users <snort-users () lists snort org> wrote:

Hi. I have read online that the Snort community rules are part of the Snort registered rules.

True.

However, I have also read that both of these rules should be enabled. Why is this the case, if the community rules 
are already included with the Snort registered rules?

The community rules are updated daily.  The registered rules are 30 days behind.

--
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group
http://www.talosintelligence.com

Attachment: smime.p7s
Description:

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Current thread: