Snort mailing list archives

Re: Rules division, divide, split


From: "Joel Esler (jesler)" <jesler () cisco com>
Date: Fri, 22 May 2015 18:33:41 +0000

Sounds like you are trying to do something oddly clever.   Can you describe what you are trying to do?

--
Joel Esler
Sent from my iPhone

On May 22, 2015, at 10:51 AM, Robert Lasota <wrkilu () wp pl<mailto:wrkilu () wp pl>> wrote:


Hi,



What is the bast way to split all rules for applications, services e.g. for ftp, voip, http, dns, smtp, pop3, sql other 
etc. ? I know that with Pulledpork I can choose one of 3 categories: security, connectivity or balanced, but we need 
also to split these more deeply - for apps (as I mentioned above).



Thanks









------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud 
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: