[Snort-users] How do you keep customized rules updated?

Steve Bernacki snort at ...14033...
Wed Feb 21 10:01:23 EST 2007


Actually, Oinkmaster works very well for keeping customized rulesets 
updated as well.  The trick is that it requires a lot of up front work 
initially to set up the appropriate disablesid/modifysid rules in 
order to programmatically make your customizations.  However, Once this is 
done, it makes keeping up with new signature releases a breeze.

Steve
-- 
Steve Bernacki, Jr
To date, the Pan-Massachusetts Challenge has raised 171 million
dollars for cancer research.  Get involved!  http://www.pmc.org/






More information about the Snort-users mailing list