Re: snortcenter include commands

[Joel Esler <eslerj () gmail com>]

Theoretically, Snort thinks it's all one file.  So you're right in
both directions :)



On 5/24/05, East, Bill <eastb () pffcu org> wrote:
> Trying to get all the old rules loaded. I have seen that I can pull the
> rules files in with the Import command so that might be the best way to
> go.
>
> I guess I'm just used to having the single, short config file and the
> rules broken out by filename. The real problem may be my reluctance to
> adapt to changes.
>
> --
> be - MOS
>
> Leela: Oh, Adelai, I've had a wonderful time today. No one's stared at
> me, or avoided staring at me, or tried to burn me. You make me feel so
> not weird.
>
>
> > -----Original Message-----
> > From: Jason Alexander [mailto:lists () itsecurity3 its uiowa edu]
> > Sent: Tuesday, May 24, 2005 11:44 AM
> > To: East, Bill
> > Cc: snort-users () lists sourceforge net
> > Subject: Re: [Snort-users] snortcenter include commands
> >
> > Bill,
> >
> > What are you trying to do here.  Are you trying to import
> > your old config into snortcenter as a catagory, or are you
> > just trying to get all the old rules loaded.
> >
> > If you want to do some hand tuning you can add a $RULE_PATH
> > and put a file on your sensor that gets included and it
> > should work fine if you just want to have your old rules as a
> > baseline.
> >
> > Jason
> >
> >
> > East, Bill wrote:
> > > I'd like to replicate my old snort config while using snortcenter.
> > >
> > > The old snort.conf had
> > >
> > > include $RULE_PATH/whatever.rules
> > >
> > > How would I go about getting this into snortcenter's
> > config? I'm sure
> > > the answer will make me feel beyond dopey.
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by Yahoo.
> Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
> Search APIs Find out how you can build Yahoo! directly into your own
> Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-- 
Joel Esler
BASE Project Lead
http://sourceforge.net/projects/secureideas


-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users