Snort mailing list archives
Re: Using both Snort registered rules and community rules
From: "Joel Esler \(jesler\) via Snort-users" <snort-users () lists snort org>
Date: Fri, 11 Jan 2019 20:26:21 +0000
On Jan 11, 2019, at 12:45 PM, Black Lion via Snort-users <snort-users () lists snort org> wrote: Hi. I have read online that the Snort community rules are part of the Snort registered rules.
True.
However, I have also read that both of these rules should be enabled. Why is this the case, if the community rules are already included with the Snort registered rules?
The community rules are updated daily. The registered rules are 30 days behind. -- Joel Esler Manager, Communities Division Cisco Talos Intelligence Group http://www.talosintelligence.com
Attachment:
smime.p7s
Description:
_______________________________________________ Snort-users mailing list Snort-users () lists snort org Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users To unsubscribe, send an email to: snort-users-leave () lists snort org Please visit http://blog.snort.org to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
Current thread:
- Using both Snort registered rules and community rules Black Lion via Snort-users (Jan 11)
- Re: Using both Snort registered rules and community rules Joel Esler (jesler) via Snort-users (Jan 11)
