[Snort-users] Question regarding the use of the terms "enabled" and "disabled" as it applies to SourceFire VRT Rules

Stephen Mullins steve.mullins.work at ...11827...
Mon Apr 13 14:06:42 EDT 2009


As seen in this changelog
what do the words "enabled" or "disabled" mean?

7567 <-> Disabled <-> SPYWARE-PUT Trackware funwebproducts
mywebsearchtoolbar-funtools runtime detection (spyware-put.rules)

Rule 7567 is still in the most recent rule packs so it obviously
doesn't mean that the rule itself is being removed or "disabled" in
the sense that it is no longer in effect.

If anyone could clarify I would appreciate it.


Steve Mullins

More information about the Snort-users mailing list