RE: snort.conf

["Martijn Heemels" <martijn () yggdrasil yi org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

you could do either one... I personally overwrite the *.rules files
in the snort dir with the new ones and restart snort.

(I'm also using the vision.rules from www.whitehats.com/ids/ and have
added an include line in the snort.conf file)

Greets, Martijn


- --
.: M. Heemels .:. webdesigner :.
.: Eindhoven, NL, martijn () heemels com :.
.: PGP of S/MIME encrypted e-mail preferred :. 

- -----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of snortlst
snortlst
Sent: Thursday, September 13, 2001 7:39 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] snort.conf


In the snort.conf I see a lot of 'includes' for rules files.I just
downloaded rules files from snort site - should I copy those rule
files to snort directory(where snort.conf is) or should I edit
snort.conf(include lines) in order to specify locations of those
rules?
thx.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBO6EDtBLMC0rbivl4EQKT2wCghfnfIApghUns3HHlYIBENL0BdpgAoMKj
9mrB5LZ0U3wOLIBKiF/SrC7j
=rZ7X
-----END PGP SIGNATURE-----


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users