[Snort-users] Rule Management with two separate rulesets

Steven McLaughlin steve at ...16368...
Tue Jul 16 23:08:12 EDT 2013


Hi All,

I am looking at testing emerging threats ruleset alongside snort rules. As
far as directory structures are concerned is it best to have the rules in
separate directories and run two separate instances of pulledpork? Or
better to have both rule sets all in the one directory?

The overlap could get complicated here with rule updates and snort conf
files etc..

Is anyone else doing this? If so any advice?

thanks,
smc
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130717/16faaf24/attachment.html>


More information about the Snort-users mailing list