[Snort-sigs] best practice on local signature maintanence

Hicks, John JHicks at ...776...
Fri Aug 23 07:32:05 EDT 2002


ActiveWork IDS Policy Manager is a Win32-based tool for doing exactly what
you're looking for :)
 
hth,
John

-----Original Message-----
From: DoL [mailto:dwylau at ...705...]
Sent: Friday, August 23, 2002 3:26 AM
To: snort-sigs at lists.sourceforge.net
Subject: [Snort-sigs] best practice on local signature maintanence


Hi All
 
Just wondering how do some of you (we) add our own local signature (or even
rule files / changes made to existing signature) and yet be able to maintain
the master from snort.org?  Do you normally keep a separate set of
signatures (rule files) for local, and add the corresponding include
statement to the snort.conf ?
 
Thanks
/dl

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20020823/d39cff1c/attachment.html>


More information about the Snort-sigs mailing list