Snort mailing list archives
Re: oinkmaster and so rules.. FAQ broken?
From: JJC <cummingsj () gmail com>
Date: Wed, 9 Feb 2011 10:00:30 -0700
On Wed, Feb 9, 2011 at 9:54 AM, Michael Scheidell <michael.scheidell () secnap com> wrote:
On 2/9/11 11:51 AM, Martin Holste wrote: I would think that makes PP perfect for you--as your actual snort.conf's would change the least per-instance. is there an 'oinkmaster.conf -> pulledport.conf' script or tool? or do I have to do this the hard way? -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 ISN: 1259*1300| SECNAP Network Security CorporationCertified SNORT Integrator 2008-9 Hot Company Award Winner, World Executive Alliance Five-Star Partner Program 2009, VARBusiness Best in Email Security,2010: Network Products Guide King of Spam Filters, SC Magazine 2008 ________________________________ This email has been scanned and certified safe by SpammerTrap®. For Information please see http://www.secnap.com/products/spammertrap/ ________________________________ ------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org
Yes, there is a tool in the pp tarball under /contrib that will convert the oinkmaster config to the apt pp config files JJC ------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org
Current thread:
- Re: oinkmaster and so rules.. FAQ broken?, (continued)
- Re: oinkmaster and so rules.. FAQ broken? waldo kitty (Feb 08)
- Re: oinkmaster and so rules.. FAQ broken? waldo kitty (Feb 08)
- Re: oinkmaster and so rules.. FAQ broken? Randal T. Rioux (Feb 08)
- Re: oinkmaster and so rules.. FAQ broken? Edward Fjellskål (Feb 09)
- Re: oinkmaster and so rules.. FAQ broken? Michael Scheidell (Feb 09)
- Re: oinkmaster and so rules.. FAQ broken? JJC (Feb 09)
- Re: oinkmaster and so rules.. FAQ broken? Michael Scheidell (Feb 09)
- Re: oinkmaster and so rules.. FAQ broken? Alan Ptak (Feb 09)
- Re: oinkmaster and so rules.. FAQ broken? Martin Holste (Feb 09)
- Re: oinkmaster and so rules.. FAQ broken? Michael Scheidell (Feb 09)
- Re: oinkmaster and so rules.. FAQ broken? JJC (Feb 09)
- Re: oinkmaster and so rules.. FAQ broken? Martin Holste (Feb 09)
- Re: oinkmaster and so rules.. FAQ broken? Alan Ptak (Feb 08)
- Re: oinkmaster and so rules.. FAQ broken? waldo kitty (Feb 08)