[Snort-sigs] oinkmaster and so rules.. FAQ broken?

JJC cummingsj at ...2420...
Wed Feb 9 12:00:30 EST 2011


On Wed, Feb 9, 2011 at 9:54 AM, Michael Scheidell
<michael.scheidell at ...1331...> wrote:
>
>
> On 2/9/11 11:51 AM, Martin Holste wrote:
>
> I would think that makes PP perfect for you--as your actual
> snort.conf's would change the least per-instance.
>
> is there an 'oinkmaster.conf -> pulledport.conf' script or tool? or do I
> have to do this the hard way?
>
>
> --
> Michael Scheidell, CTO
> o: 561-999-5000
> d: 561-948-2259
> ISN: 1259*1300
>> | SECNAP Network Security Corporation
>
> Certified SNORT Integrator
> 2008-9 Hot Company Award Winner, World Executive Alliance
> Five-Star Partner Program 2009, VARBusiness
> Best in Email Security,2010: Network Products Guide
> King of Spam Filters, SC Magazine 2008
>
> ________________________________
>
> This email has been scanned and certified safe by SpammerTrap®.
> For Information please see http://www.secnap.com/products/spammertrap/
>
> ________________________________
>
> ------------------------------------------------------------------------------
> The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
> Pinpoint memory and threading errors before they happen.
> Find and fix more than 250 security defects in the development cycle.
> Locate bottlenecks in serial and parallel code that limit performance.
> http://p.sf.net/sfu/intel-dev2devfeb
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
>
>

Yes, there is a tool in the pp tarball under /contrib that will
convert the oinkmaster config to the apt pp config files

JJC




More information about the Snort-sigs mailing list