RE: [Snort-users] snortcenter include commands

Trying to get all the old rules loaded. I have seen that I can pull the
rules files in with the Import command so that might be the best way to
go.

I guess I'm just used to having the single, short config file and the
rules broken out by filename. The real problem may be my reluctance to
adapt to changes.

--
be - MOS

Leela: Oh, Adelai, I've had a wonderful time today. No one's stared at
me, or avoided staring at me, or tried to burn me. You make me feel so
not weird.


> -----Original Message-----
> From: Jason Alexander [mailto:lists@itsecurity3.its.uiowa.edu]
> Sent: Tuesday, May 24, 2005 11:44 AM
> To: East, Bill
> Cc: snort-users@lists.sourceforge.net
> Subject: Re: [Snort-users] snortcenter include commands
>
> Bill,
>
> What are you trying to do here. Are you trying to import
> your old config into snortcenter as a catagory, or are you
> just trying to get all the old rules loaded.
>
> If you want to do some hand tuning you can add a $RULE_PATH
> and put a file on your sensor that gets included and it
> should work fine if you just want to have your old rules as a
> baseline.
>
> Jason
>
>
> East, Bill wrote:
> > I'd like to replicate my old snort config while using snortcenter.
> >
> > The old snort.conf had
> >
> > include $RULE_PATH/whatever.rules
> >
> > How would I go about getting this into snortcenter's
> config? I'm sure
> > the answer will make me feel beyond dopey.
> >
>
>
>



-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users