[Snort-users] Writing/placing custom rules
dnacat25 at ...11827...
Thu Feb 9 08:07:15 EST 2006
We would like to add custom rules to our snort configuration file
11)which would be the best place to write them
a)Write pass alert rules directly in the snort conf file
b)In local rules file
IF i write them in local rules file what would it impact on other rule files
What precautions need to be taken and what are the best practices
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users