[Snort-users] Problems with snort, Barnyard2 and mysql database

waldo kitty wkitty42 at ...14940...
Tue Oct 30 11:59:08 EDT 2012


On 10/30/2012 10:38, Dmitry Korzhevin wrote:
> Thank you,
>
> After i add "rev:1;" to this rule, and restart snort, barnyard2 - it works!

with that in mind, the lesson you should carry away from this is that every rule 
should have a revision number and it should be incremented each time the rule is 
(significantly?) modified...

some folks keep their rules in a CVS/SVN/GIT or such... each revision of a rule 
goes in there as one update... in this way, they can easily revert or see the 
history of the rule ;)





More information about the Snort-users mailing list