<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:16px"><div id="yui_3_16_0_1_1432716706814_25666" dir="ltr">I realized that and still struggling with this step.  Maybe somebody that had done the same training (CEH v8) could help. </div><div id="yui_3_16_0_1_1432716706814_27868" dir="ltr">I can't proceed from this step onwards.  I have found the missing rules but cant seem to find the one I want.  <br></div><div id="yui_3_16_0_1_1432716706814_27853" dir="ltr"><br></div><br><div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;"> <div dir="ltr"> <font face="Arial" size="2"> On Thursday, 28 May 2015, 5:06, Joel Esler (jesler) <jesler@...3865...> wrote:<br> </font> </div>  <br><br> <div class="y_msg_container"><div id="yiv5160748581"><div>
Maybe this will help?
<div class="yiv5160748581"><br class="yiv5160748581" clear="none">
</div>
<div class="yiv5160748581"><a rel="nofollow" shape="rect" class="yiv5160748581" target="_blank" href="http://blog.snort.org/2013/10/snort-vrt-default-ruleset-rebalancing.html">http://blog.snort.org/2013/10/snort-vrt-default-ruleset-rebalancing.html</a></div>
<div class="yiv5160748581"><a rel="nofollow" shape="rect" class="yiv5160748581" target="_blank" href="https://snort.org/faq/why-are-rules-commented-out-by-default">https://snort.org/faq/why-are-rules-commented-out-by-default</a></div>
<div class="yiv5160748581"><br class="yiv5160748581" clear="none">
</div>
<div class="yiv5160748581"><br class="yiv5160748581" clear="none">
</div>
<div class="yiv5160748581"><span class="yiv5160748581" style="font-size:12px;font-family:'Lucida Grande';">--</span><br class="yiv5160748581" clear="none">
<span class="yiv5160748581" style="font-size:12px;font-family:'Lucida Grande';"><b class="yiv5160748581">Joel Esler</b></span><br class="yiv5160748581" clear="none">
<span class="yiv5160748581" style="font-size:12px;font-family:'Lucida Grande';">Open Source Manager</span><br class="yiv5160748581" clear="none">
<span class="yiv5160748581" style="font-size:12px;font-family:'Lucida Grande';">Threat Intelligence Team Lead</span><br class="yiv5160748581" clear="none">
<span class="yiv5160748581" style="font-size:12px;font-family:'Lucida Grande';">Talos Group</span></div>
<div class="yiv5160748581"><br class="yiv5160748581" clear="none">
<div>
<blockquote class="yiv5160748581" type="cite">
<div class="yiv5160748581yqt8307548368" id="yiv5160748581yqt05352"><div class="yiv5160748581">On May 27, 2015, at 7:58 AM, jihene ksiksi <<a rel="nofollow" shape="rect" class="yiv5160748581" ymailto="mailto:jihene.ksiksi@...4037..." target="_blank" href="mailto:jihene.ksiksi@...253...4037...">jihene.ksiksi@...4037...</a>> wrote:</div>
<br class="yiv5160748581Apple-interchange-newline" clear="none">
<div class="yiv5160748581">
<div class="yiv5160748581WordSection1" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<div class="yiv5160748581" style="margin:0cm 0cm 0.0001pt;font-size:11pt;font-family:Calibri, sans-serif;">
Why  many rules in each  category file are commented ??</div> 
</div>
<span class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline;">------------------------------------------------------------------------------</span><br class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" clear="none">
<span class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline;">_______________________________________________</span><br class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" clear="none">
<span class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline;">Snort-sigs
 mailing list</span><br class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" clear="none">
<a rel="nofollow" shape="rect" class="yiv5160748581" ymailto="mailto:Snort-sigs@lists.sourceforge.net" target="_blank" href="mailto:Snort-sigs@lists.sourceforge.net" style="color:purple;text-decoration:underline;font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">Snort-sigs@lists.sourceforge.net</a><br class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" clear="none">
<a rel="nofollow" shape="rect" class="yiv5160748581" target="_blank" href="https://lists.sourceforge.net/lists/listinfo/snort-sigs" style="color:purple;text-decoration:underline;font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">https://lists.sourceforge.net/lists/listinfo/snort-sigs</a><br class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" clear="none">
<a rel="nofollow" shape="rect" class="yiv5160748581" target="_blank" href="http://www.snort.org/" style="color:purple;text-decoration:underline;font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">http://www.snort.org</a><br class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" clear="none">
<br class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" clear="none">
<br class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" clear="none">
<span class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline;">Please
 visit<span class="yiv5160748581Apple-converted-space"> </span></span><a rel="nofollow" shape="rect" class="yiv5160748581" target="_blank" href="http://blog.snort.org/" style="color:purple;text-decoration:underline;font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">http://blog.snort.org</a><span class="yiv5160748581" style="font-family:Menlo-Regular;font-size:11px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline;"><span class="yiv5160748581Apple-converted-space"> </span>for
 the latest news about Snort!</span></div></div>
</blockquote>
</div>
<br class="yiv5160748581" clear="none">
</div>
</div></div><br><div class="yqt8307548368" id="yqt80709">------------------------------------------------------------------------------<br clear="none"></div><br><div class="yqt8307548368" id="yqt23583">_______________________________________________<br clear="none">Snort-sigs mailing list<br clear="none"><a shape="rect" ymailto="mailto:Snort-sigs@...1979....sourceforge.net" href="mailto:Snort-sigs@lists.sourceforge.net">Snort-sigs@lists.sourceforge.net</a><br clear="none"><a shape="rect" href="https://lists.sourceforge.net/lists/listinfo/snort-sigs" target="_blank">https://lists.sourceforge.net/lists/listinfo/snort-sigs</a><br clear="none"><a shape="rect" href="http://www.snort.org/" target="_blank">http://www.snort.org</a><br clear="none"><br clear="none"><br clear="none">Please visit <a shape="rect" href="http://blog.snort.org/" target="_blank">http://blog.snort.org </a>for the latest news about Snort!</div><br><br></div>  </div> </div>  </div></div></body></html>