Snort
[Top] [All Lists]

Re: [Snort-users] How do you keep customized rules updated?

To: "'OlRoy OlRoy'" <olroy1212@yahoo.com>, <snort-users@lists.sourceforge.net>
Subject: Re: [Snort-users] How do you keep customized rules updated?
From: "Jeff Dell" <jdell@activeworx.com>
Date: Wed, 21 Feb 2007 11:28:17 -0500
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
In-reply-to: <78454.91719.qm@web57707.mail.re3.yahoo.com>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
References: <78454.91719.qm@web57707.mail.re3.yahoo.com>
Sender: snort-users-bounces@lists.sourceforge.net
Thread-index: AcdVx6p1g705mj0yQ6+8n0PuBdUuRAABFspA

You might want to checkout IDS Policy Manager. It is a free tool that allows you to manage many policies and snort sensors from a Graphical interface.

 

http://www.activeworx.org

 

Cheers,

Jeff

 

From: snort-users-bounces@lists.sourceforge.net [mailto:snort-users-bounces@lists.sourceforge.net] On Behalf Of OlRoy OlRoy
Sent: Wednesday, February 21, 2007 9:48 AM
To: snort-users@lists.sourceforge.net
Subject: [Snort-users] How do you keep customized rules updated?

 

Hello group,

Oinkmaster seems great if you haven't spent any time customizing the rules.  However, if you have spent a lot of time customizing Snort rules for your environment (deleted and modified rules), then what is the best way to keep the rule set updated?  How exactly are you guys doing it?

 


Cheap Talk? Check out Yahoo! Messenger's low PC-to-Phone call rates.

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
<Prev in Thread] Current Thread [Next in Thread>