[Snort-users] Oinkmaster overwrites

Jeff Kell jeff-kell at ...6282...
Wed Jun 7 15:03:07 EDT 2006


Drew Burchett wrote:
> If I modify a rule in one of the snort rule files (ie:  add a snortsam
> configuration to that rule), when Oinkmaster updates, what does it do
> with that rule?

Subject says it all -- it overwrites.

For snortsam directives, add them to sid-block.map and leave the rule alone.

Jeff





More information about the Snort-users mailing list