[Snort-devel] Will snort support rules update on the fly

Xiao Jun xiaojuntime at ...2499...
Thu Jul 3 22:13:36 EDT 2008


Marty and Leon, Thanks for your information!

2008/7/3 Martin Roesch <roesch at ...402...>:
> Hi Jun,
> There are several design features in the new SnortSP code base that are
> specifically there to support changing configuration on the fly, it will be
> supported in the not too distant future.
> -Marty
> On Jul 3, 2008, at 2:45 AM, Xiao Jun wrote:
>
> Hi everybody,
>
> I am wondering if there have any plan to support snort rules update on the
> fly.
> Currently, we can edit our rule file and then reload those files, but
> unfortunately, all of the states (such as session states) are all
> lost.
>
> I didn't see any plan for this in snort 3.0 or 2.x, so could you share
> your opinions?
>
> Thanks,
> Jun
>
> -------------------------------------------------------------------------
> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
> Studies have shown that voting for your favorite open source project,
> along with a healthy diet, reduces your potential for chronic lameness
> and boredom. Vote Now at http://www.sourceforge.net/community/cca08
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>
> --
> Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
> Sourcefire - Security for the Real World - http://www.sourcefire.com
> Snort: Open Source IDP - http://www.snort.org
>
>
>
>
>




More information about the Snort-devel mailing list