[Snort-users] Snort / Rules / Pulled Pork
marcin.dulak at gmail.com
Sat Sep 16 22:00:53 EDT 2017
*grep "suppress gen_id 3" -r /etc/*
On Sun, Sep 17, 2017 at 3:47 AM, Dan O'Brien <pdobrien3 at gmail.com> wrote:
> pulledpork downloaded and installed the new rules, but snort has not been
> restarted so it still uses the old suppress definitions.
> You can also force snort to re-read the new snort.rules without restarting
> kill -hup $(pidof snort)
> The computer has been rebooted and snort restarted several times. Any
> other ideas?
> "Better is a poor man who walks in his integrity than a rich man who is
> crooked in his ways." - Proverbs 28:6
> Sent from my iPad
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users