[Snort-sigs] best practice on local signature maintanence
JHicks at ...776...
Fri Aug 23 07:32:05 EDT 2002
ActiveWork IDS Policy Manager is a Win32-based tool for doing exactly what
you're looking for :)
From: DoL [mailto:dwylau at ...705...]
Sent: Friday, August 23, 2002 3:26 AM
To: snort-sigs at lists.sourceforge.net
Subject: [Snort-sigs] best practice on local signature maintanence
Just wondering how do some of you (we) add our own local signature (or even
rule files / changes made to existing signature) and yet be able to maintain
the master from snort.org? Do you normally keep a separate set of
signatures (rule files) for local, and add the corresponding include
statement to the snort.conf ?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-sigs