[Snort-users] snort.conf

Martijn Heemels martijn at ...1873...
Thu Sep 13 12:07:15 EDT 2001


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

you could do either one... I personally overwrite the *.rules files
in the snort dir with the new ones and restart snort.

(I'm also using the vision.rules from www.whitehats.com/ids/ and have
added an include line in the snort.conf file)

Greets, Martijn


- --
.: M. Heemels .:. webdesigner :.
.: Eindhoven, NL, martijn at ...1736... :.
.: PGP of S/MIME encrypted e-mail preferred :. 

- -----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of snortlst
snortlst
Sent: Thursday, September 13, 2001 7:39 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] snort.conf


In the snort.conf I see a lot of 'includes' for rules files.I just
downloaded rules files from snort site - should I copy those rule
files to snort directory(where snort.conf is) or should I edit
snort.conf(include lines) in order to specify locations of those
rules?
thx.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBO6EDtBLMC0rbivl4EQKT2wCghfnfIApghUns3HHlYIBENL0BdpgAoMKj
9mrB5LZ0U3wOLIBKiF/SrC7j
=rZ7X
-----END PGP SIGNATURE-----





More information about the Snort-users mailing list