[Snort-users] Changing rules online

Fyodor fygrave at ...121...
Sun Aug 20 03:37:57 EDT 2000


~ :Two questions about snort:
~ :
~ :1 - Does snort number the rules? That is, can I access rule nr. 15? If not,
~ :can this be done?

no, internally it's represented as a linked list (last time I checked that
part of the code ;-)), enumiration could be an option though, if needed.

~ :2 - If I want to be able to add or change rules online, how can this be
~ :done? (If the rules are numbered, this should be easy, I think :-)!).
~ :


 What do you mean by `online'?






More information about the Snort-users mailing list