[Snort-users] How do you keep customized rules updated?

Nigel Houghton nigel at ...1935...
Wed Feb 21 10:15:12 EST 2007


On  0, OlRoy OlRoy <olroy1212 at ...131...> wrote:
> 
>    Hello group,
>    Oinkmaster seems great if you haven't spent any time customizing the
>    rules.  However, if you have spent a lot of time customizing Snort
>    rules for your environment (deleted and modified rules), then what is
>    the best way to keep the rule set updated?  How exactly are you guys
>    doing it?

By using Oinkmaster and making suitable configuration changes to
preserve whatever you have done with the rule set and configuration
files.

-- 
Nigel Houghton
Office Linebacker
SF VRT

"Those who say it can't be done, should get out of the way of those doing it"




More information about the Snort-users mailing list