Snort mailing list archives
Re: Testing Snort
From: Joel Esler <jesler () sourcefire com>
Date: Wed, 30 Jan 2013 15:52:03 -0500
On Jan 30, 2013, at 3:44 PM, Josh Bitto <jbitto () onlineschool ca> wrote:
1. The rules update....I obtained the oinkmaster code and put it in. It has the option to update at certain time every 12 hours for example.....Does it automatically do that or do I have to buy a subscription for that to actually work? I know the definitions will be 30 days old for just a regular registered user, but still.
You'd probably want to cron it.
2. Back to the rules search....ok I searched a couple of SID numbers and it came back as "this rule as been deprecated and placed into deleted.rules" Should I suppress that or is my definitions outdated?
Your definitions may be outdated. When we delete a rule, it usually because it's no longer useful or it's been replaced by better detection. -- Joel Esler Senior Research Engineer, VRT OpenSource Community Manager Sourcefire
------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_jan
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Testing Snort Josh Bitto (Jan 30)
- Re: Testing Snort Jeremy Hoel (Jan 30)
- Re: Testing Snort Josh Bitto (Jan 30)
- Re: Testing Snort Jeremy Hoel (Jan 30)
- Re: Testing Snort Justin Knox (Jan 30)
- Re: Testing Snort Russ Combs (Jan 30)
- Re: Testing Snort Josh Bitto (Jan 30)
- Re: Testing Snort Joel Esler (Jan 30)
- Re: Testing Snort Jeremy Hoel (Jan 30)
- Re: Testing Snort Josh Bitto (Jan 30)
- Re: Testing Snort Joel Esler (Jan 30)
- Re: Testing Snort Josh Bitto (Jan 30)
- Re: Testing Snort Josh Bitto (Jan 30)
- Re: Testing Snort Jeremy Hoel (Jan 31)
- Re: Testing Snort JJC (Jan 31)
- Re: Testing Snort Josh Bitto (Jan 30)
- Re: Testing Snort Jeremy Hoel (Jan 30)