[Snort-users] Intermittent Pulled Pork Error

Randal T. Rioux randy at ...13561...
Fri Feb 18 16:21:05 EST 2011


On 2/17/2011 9:23 PM, waldo kitty wrote:
> On 2/17/2011 10:37, Weir, Jason wrote:
>> Thanks Joel...
>>
>> I'd prefer updates as soon as they are available (within a couple hours
>> at least) without manual intervention - thus the frequent checking via
>> cron.
>>
>> The hash file is less than 1K - I would suspect I could check it on the
>> minute and not overload the cloud...
> 
> oh no... another update once every minute cron job! these types of things are 
> why VRT implemented the 15 minute rule in the first place :(

Yeah, that stuff drives me nuts.

I really don't see the gain from such a policy. Once an hour, meh, ok.
Once a minute - I pull on your ear and slap your knuckles with a ruler!

Randy




More information about the Snort-users mailing list