[Snort-users] Pulled Pork 0.7.2 Policies not working

Michael Steele michaels at ...9077...
Sun Jan 22 18:42:24 EST 2017


Darn, I no sooner sent this out and remembered that I activated all the
rules so the policies wouldn't process no matter what they were set too..

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

I'm testing Pulled Pork on a slave sensor using -nPT to bypass the signature
file.

 

I've tried setting the policy using Balanced and Security. When the balanced
policy is ran the output says it Modified 19004 rules. However the stats at
the end never changes. It fails to update the .rules file with the changes.

 

After running each of the policies I save the .rules file from each run, and
they are identical.

 

Attached is the output from each run. I'm not seeing anything. Maybe this is
a problem others are having but not noticing?

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

 

Thanks.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170122/d937ec91/attachment.html>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: Security.txt
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170122/d937ec91/attachment.txt>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: Balanced.txt
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170122/d937ec91/attachment-0001.txt>


More information about the Snort-users mailing list