[Snort-devel] Re: [Snort-users] parsing the rules

Keith W. McCammon mccammon at ...2499...
Tue Aug 31 07:09:01 EDT 2004


Snort.conf is the configuration file used by Snort, within which the
various .rules files are included.  Thus, snort.conf is parsed for a
variety of configuration directives (including rules) when the engine
is started in IDS mode.  Because of the nature of includes, the .rules
files are parsed as part of snort.conf.  If you wanted to, you could
add your rules to snort.conf directly (although you'd have a mess on
your hands).

----- Original Message -----
From: snort user <snort_user2004 at ...398...>
Date: Fri, 27 Aug 2004 13:45:21 -0700 (PDT)
Subject: [Snort-users] parsing the rules
To: snort-devel at lists.sourceforge.net, user <snort-users at lists.sourceforge.net>


i ran snort in the ids mode and one thing confusing. it says "Parsing
Rules file snort.config" . i thought the config file has a pointer to
the rules directory. could someone please help me with this. i was
also going thru the code and found a function call to
ParseRulesFile(pv.config). any help will be appreciated.
  
thanks. 

 ________________________________
Do you Yahoo!?
 New and Improved Yahoo! Mail - Send 10MB messages!




More information about the Snort-devel mailing list