From: Esler, J. - C. <joe...@rc...> - 2004-06-25 19:32:15
|
I did look at it. Seems like too much work when someone could possibly just zip it up and send it to me... We'd like it for an example and to take a look at how the rules are structured.. J -----Original Message----- From: sno...@li... [mailto:sno...@li...] On Behalf Of Rob McMillen Sent: Friday, June 25, 2004 4:12 PM To: sno...@li... Subject: Re: [Snort-inline-users] Snort-inline ruleset Take a look at snortconfig. This will allow you to modify the current=20 snort ruleset to work with snort_inline. http://www.shmoo.com/~bmc/software/snortconfig/ Rob On Fri, 25 Jun 2004, Esler, Joel - Contractor wrote: > Date: Fri, 25 Jun 2004 14:15:53 -0400 > From: "Esler, Joel - Contractor" <joe...@rc...> > To: sno...@li... > Subject: [Snort-inline-users] Snort-inline ruleset >=20 > Does anyone have a preconfigured Snort-inline ruleset for a honeynet? > It appears as if the rules included with Snort-inline are the regular > Snort alerts.. >=20 > =20 >=20 > J=20 >=20 >=20 ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 -=20 digital self defense, top technical experts, no vendor pitches,=20 unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ Snort-inline-users mailing list Sno...@li... https://lists.sourceforge.net/lists/listinfo/snort-inline-users |