Security
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
 
User Name:
Password:
Remember me
Go Back   Web Development Archives Mailing Lists Security

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Display Modes
 
Unread Web Development Archives Sponsor:
  #1  
Old July 2nd, 2008, 02:50 PM
Joe Beasley
Guest
Dev Archives Newbie (0 - 499 posts)
 
Posts: n/a  
Time spent in forums:
Reputation Power:
snort updates and changes to snort.conf

You don't have to put your snort.conf file in the same directory your
*.rules files are in. I keep my snort.conf
in /usr/local/snort-version/etc, and keep all the rules
in /usr/local/snort-version/rules.

All rule updates will have a new snort.conf (which is overwritten each
time) in the rules directory, but I start snort with the conf file in
the etc directory.

Sun, 2008-06-29 at 18:07 -0700, newsecurityguy wrote:
I know this is not really the place for this question but I have had no luck
elsewhere. Currently, snort is set to update to the newest rule set on a
daily basis, which is what I want. However, I also need to suppress some
SIDS, which I have always done by editing the snort.conf file. When the
updates occur, it appears as if snort.conf is overwritten with a new
version, as the changes I make to the file do not last more than 24 hours
before disappearing out of the snort.conf. Am I correct in assuming this is
what is occurring? Is there any other way to easily suppress events without
having to edit the file after each update?

Reply With Quote
Reply

Viewing: Web Development Archives Mailing Lists Security > snort updates and changes to snort.conf


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 6 hosted by Hostway