[Snort-users] Pulledpork Item

Bill Pickens wmpickens at ...11827...
Mon Jun 27 12:54:11 EDT 2011


Hopefully I can get an answer in this forum.

Hello Everyone,
I have been working with snort for about a year and have managed
signatures using other products.
I was looking into using PP as another option.

I downloaded 0.6.0 and have it functioning.

Can PP read exisitng rule files that have disabled rules by comment in the
rule file and build the new rules files with the existing disabled rules,
disabled?

If not, does someone have a unix shell script that can create a
disablesid.conf from exiting rules files?

Thanks for any help.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20110627/07eaeb27/attachment.html>


More information about the Snort-users mailing list