Security Basics mailing list archives

snort updates and changes to snort.conf


From: newsecurityguy <JBASKEW () uncg edu>
Date: Sun, 29 Jun 2008 18:07:54 -0700 (PDT)


I know this is not really the place for this question but I have had no luck
elsewhere. Currently, snort is set to update to the newest rule set on a
daily basis, which is what I want. However, I also need to suppress some
SIDS, which I have always done by editing the snort.conf file. When the
updates occur, it appears as if snort.conf is overwritten with a new
version, as the changes I make to the file do not last more than 24 hours
before disappearing out of the snort.conf. Am I correct in assuming this is
what is occurring? Is there any other way to easily suppress events without
having to edit the file after each update?
-- 
View this message in context: http://www.nabble.com/snort--updates-and-changes-to-snort.conf-tp18187204p18187204.html
Sent from the Security Basics mailing list archive at Nabble.com.


Current thread: