[Snort-users] Why so many default disabled rules?

Kurzawa, Kevin kkurzawa at ...16800...
Thu Apr 17 11:25:01 EDT 2014


I am curious as to why the Snort rules ship with so many of them disabled/commented out by default.

It seems the default set is ~4,000. But if using the option to enable /all/ rules in Oinkmaster it comes out with ~20,000. I get Registered User Release rules, not the Subscriber Release rules.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140417/fbd73074/attachment.html>


More information about the Snort-users mailing list