[Snort-users] Only local.rules

Y M snort at ...15979...
Wed Jun 12 12:35:59 EDT 2013

If you are using PulledPork (without the -k) and rules get aggregated into snort.rules and so_rules.rules only, then you can ignore them from being processed in pulledpork.conf file.
From: Nicholas Horton<mailto:fivetenets at ...14399...>
Sent: ‎6/‎12/‎2013 7:16 PM
To: Snort Users<mailto:snort-users at lists.sourceforge.net>
Subject: [Snort-users] Only local.rules

What's the easiest way to disable all rules (preprocessor, text, so, etc) and only use the local.rules file?

This SF.net email is sponsored by Windows:

Build for Windows Store.

Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130612/71ca73a8/attachment.html>

More information about the Snort-users mailing list