so rules

["John York" <YorkJ () brcc edu>]

Hi

I followed the procedure in
snortrules-snapshot-CURRENT_s/so_rules/src/README to set up my so rules,
and everything appears to work fine.

It has me generate the stub files using
snort -c /usr/local/etc/snort/snort.conf
--dump-dynamic-rules=/usr/local/etc/snort/so_rules

However, I notice that snortrules-snapshot-CURRENT_s/so_rules already
contains a set of stub rules that look pretty similar to what I
generated.  Is there any reason I can't just dump the stub rules from
the tarball directly into my so_rules directory instead of generating
new ones?

Thanks
John


------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users