[Snort-sigs] snort rule update

Gisler, Johnny JGisler at ...516...
Wed Sep 3 12:16:09 EDT 2003


Honestly, these people should learn to use their OS's a little more.

-----Original Message-----
From: Jade E. Deane [mailto:jade.deane at ...1778...] 
Sent: Tuesday, September 02, 2003 18:26
To: Jeanne Mode
Cc: snort-sigs at lists.sourceforge.net
Subject: Re: [Snort-sigs] snort rule update


1)  Use something like "Oinkmaster", or

2)  Write a crude crappy script like this:

#!/bin/sh
#sleep 60
wget --timeout=60 --cache=off
http://www.snort.org/dl/rules/snortrules-stable.tar.gz -O
/home/snort/snortrules-stable.tar.gz
tar xvfz /home/snort/snortrules-stable.tar.gz -C /home/snort chown -R snort
/home/snort/rules chgrp -R snort /home/snort/rules killall -9 snort ifconfig
dc0 up /usr/local/bin/snort -i dc0 -e -I -c /home/snort/snort_dc0.conf -dev
-u snort -g snort -y -D -l /var/log/snort ifconfig tl0 up
/usr/local/bin/snort -i tl0 -e -I -c /home/snort/snort_tl0.conf -dev -u
snort -g snort -y -D -l /var/log/snort #sleep 10


On Mon, 2003-09-01 at 16:44, Jeanne Mode wrote:
> hi ,
> how to update automaticly snort rules?
> thanks 
> Maurice Sleiman
> +41223079920
> Gestronic Geneva
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf 
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net 
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
-- 

PGP Public Key:  http://www.riven.net/~moose/key.asc




More information about the Snort-sigs mailing list