[Snort-sigs] (RE : rules update) Hope this help (bis)
bouscasse_david at ...174...
Wed Dec 19 06:04:05 EST 2001
As Yahoo's filter does no accept .sh attachment, a
> Hi pigs lovers,
> Here's a sh script which look in a old rules set the
> commented alerts, and comment them if any in a new
> rule set. You can adapt it easily to add your own
> rules in the new rule set.
> Message: 1
> From: "Study List" <studylist at ...12...>
> To: snort-sigs at lists.sourceforge.net
> Date: Mon, 17 Dec 2001 22:03:45 +0000
> I am running the current version of snort and have
> spent the last 2 days
> configuring it so that I dont log certain things. I
> would like to update
> the rules files withouth losing my changes that I
> have made to files like
> web-misc.rules and icmp.rules. I added custom
> rules to local.rules and
> commented out or deleted rules from other files.
> Any possible way to do this? I tried diff and patch
> but it sees a commented
> rule as being different than the original rule (as
> it is since it has a #).
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Courrier : http://courrier.yahoo.fr
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 1513 bytes
More information about the Snort-sigs