Snort mailing list archives
Turning off signatures
From: Jeff Kell <jeff-kell () utc edu>
Date: Sun, 21 Dec 2003 22:31:43 -0500
Hello... after the usual hassles installing snort/acid/MqSql/etc on RedHat 9, I'm happily sniffing away. Now to tune some signatures.
The FAQ just says '#' comment them out. But that will have to be repeated with each download of the rules(?). Is there some magic I'm overlooking regarding signature maintenance?
Thanks in advance, Jeff ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort just stop when more 32000 alerts (different IPs) aregenerated maguiler () cantv net (Dec 12)
- Re: snort just stop when more 32000 alerts (different IPs) aregenerated twig les (Dec 12)
- <Possible follow-ups>
- snort just stop when more 32000 alerts (different IPs) aregenerated maguiler () cantv net (Dec 15)
- RE: snort just stop when more 32000 alerts (different IPs) aregenerated Jerry Shenk (Dec 21)
- Turning off signatures Jeff Kell (Dec 21)
- Re: Turning off signatures twig les (Dec 21)
- Re: snort just stop when more 32000 alerts (different IPs) aregenerated J-H. Johansen (Dec 22)
- RE: snort just stop when more 32000 alerts (different IPs) aregenerated Jerry Shenk (Dec 21)