[Snort-users] Snort rules questions
bmc at ...950...
Wed Oct 3 10:12:01 EDT 2001
According to Erek Adams:
> On Tue, 2 Oct 2001, Sloan Miller wrote:
> > Sorry about that I should have mentioned that I am running snort on a DSL
> > connection. This is my home network. Not a great deal of traffic. The box
> > is not running X, it was running apache but I disabled it to free up more
> > RAM to see if there was an effect. I am running the full set of snort rules
> > from snort.org If I remember correctly it is over 100 about 108 or so.
> Ok, this is wierd. On my testing/devel box, I'm running the rules from CVS
> and I'm at around 640 or so. Unless you've pruned already, those numbers
> sound _real_ low.
You both are off by a mile.
By default there are 934 signatures loaded.
There are a total of 1163 signatures available if you enable the
signatures that are disabled by default.
More information about the Snort-users