[Snort-users] How do you keep customized rules updated?
nigel at ...1935...
Wed Feb 21 10:15:12 EST 2007
On 0, OlRoy OlRoy <olroy1212 at ...131...> wrote:
> Hello group,
> Oinkmaster seems great if you haven't spent any time customizing the
> rules. However, if you have spent a lot of time customizing Snort
> rules for your environment (deleted and modified rules), then what is
> the best way to keep the rule set updated? How exactly are you guys
> doing it?
By using Oinkmaster and making suitable configuration changes to
preserve whatever you have done with the rule set and configuration
"Those who say it can't be done, should get out of the way of those doing it"
More information about the Snort-users