[Snort-users] Snort-Gui Editing Rules

Jeff Dell jdell at ...1095...
Fri Oct 15 04:23:11 EDT 2004


 
> - <http://www.activeworx.org/>, which looks nice, but doesn't have an 
> 'expert mode' allowing you to modify rules. It's also 
> Windows-only (though 
> it could manage UNIX sensors).

Actually.. You can modify rules without any problem. You are probably
working with the default policy that is included, just edit the policy and
uncheck the lock checkbox. You can now modify all aspects of the rules. If
you add any future policies they are unlocked by default.

Cheers,

Jeff






More information about the Snort-users mailing list