[Snort-users] Rules division, divide, split

Joel Esler (jesler) jesler at ...589...
Fri May 22 14:33:41 EDT 2015

Sounds like you are trying to do something oddly clever.   Can you describe what you are trying to do?

Joel Esler
Sent from my iPhone

On May 22, 2015, at 10:51 AM, Robert Lasota <wrkilu at ...3879...<mailto:wrkilu at ...3879...>> wrote:


What is the bast way to split all rules for applications, services e.g. for ftp, voip, http, dns, smtp, pop3, sql other etc. ? I know that with Pulledpork I can choose one of 3 categories: security, connectivity or balanced, but we need also to split these more deeply - for apps (as I mentioned above).


One dashboard for servers and applications across Physical-Virtual-Cloud
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
Snort-users mailing list
Snort-users at lists.sourceforge.net<mailto:Snort-users at lists.sourceforge.net>
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150522/ddaaa4c9/attachment.html>

More information about the Snort-users mailing list