Re: PulledPork and empty Emerging ruleset

[Y M <snort () outlook com>]

ET rules do not include the metadata required to designate a rule to a rules policy. Check the metadata keyword in  a 
VRT/TALOS rule to see how. PulledPork uses this metadata to match the policy specified in command line with rules.
Use ET categories in enablesid.conf to enable by category.

Sent from Mobile




On Sat, May 30, 2015 at 4:39 AM -0700, "Robert Lasota" <wrkilu () wp pl> wrote:
------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!