[Snort-users] I have written a Linux shell script to enable all Snort rules which were commented out
Teo En Ming
teo.en.ming at ...11827...
Mon Apr 7 18:04:52 EDT 2014
Originally, I had wanted to use Pulled Pork to enable all Snort rules which
were commented out/disabled. But there is no comprehensive guide/manual on
Pulled Pork which covers every step. So I thought better and decided to
write a very simple Linux shell script to un-comment/enable all the Snort
rules which were commented out/disabled. The source code only consists of a
===Start of Linux Shell Script===
# Linux shell script: enable-all-snort-rules.sh
# Written by: Teo En Ming
# Email: teo.en.ming at ...11827...
# Date: 8 April 2014 Tuesday 5:17 A.M. Singapore Time
# Version: 1.0
for i in `ls -1 $RULE_PATH`
echo "Enabling all Snort rules in $i"
sed -i 's/^# //g' $i
===End of Linux Shell Script===
Use the program at your own risk! I assume no responsibility if you screw
up your Snort installation. I tried to un-comment all the Snort rules and
Snort couldn't start. Some enabled rules are preventing Snort from
starting. Somebody please advise.
Teo En Ming
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users