[Snort-users] Which rules to use for snort ?
rnutter at ...5992...
Mon Jun 3 14:20:09 EDT 2002
No reason to use the other. Just saw another rules set available and that
caused me to ask the question.
From: John Sage
To: Ronald Nutter
Cc: snort-users at lists.sourceforge.net
Sent: 6/3/02 4:40 PM
Subject: Re: [Snort-users] Which rules to use for snort ?
I would answer your question with another:
Why would you not use the rules that come with the distribution, at
least until you're up and running and understand what's going on?
What's not to love?
Warning: time of day goes back, taking countermeasures.
PGP key http://www.finchhaven.com/pages/gpg_pubkey.html
Fingerprint FE 97 0C 57 08 43 F3 EB 49 A1 0C D0 8E 0C D0 BE C8 38 CC B5
On Sun, Jun 02, 2002 at 03:20:04PM -0400, Ronald Nutter wrote:
> I have recently started using Snort and am now a little confused. I
> about the rules for Snort that are on the Snort web site. I have also
> across rules for Snort on Whitehats.com. Which should I use ? Is it
> possible to use both ?
More information about the Snort-users