|
|
|
|
Snort Forums Archive
Archive Home » Rules » Manual Rule Update
Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.
[ Notice: Full Version of This Topic ]
Manual Rule Update
Posted by DaveAinsworth on March 22, 2005 01:45:41
I am running Snort 2.3 with Acid on a Windows 2000 platform. I would like to update the rules and have downloaded an update.
Is there a document or whitepaper on which files need to be copied to which locations?
I have opened the downloaded Rules update file and it contains 2 direcotories. Doc and Rules.
What do I do next?
Cheers. Dave. |
|
Posted by TBoNe on March 22, 2005 08:49:51
Well the manual way is just overwrite your current snort rules folder (c:\snort or wherever snort install is located) with the new rules file you just unzipped. The dilema with this is if you tuned your IDS rules at all (editing the actually rules files and commenting out certain rules) this will overide that. The best way is to setup oinkmaster, that way it does it all automated and will auto comment out rules you tell it to instead of just overwriting them. makes sense? |
|
Posted by edescala on January 29, 2008 16:17:29
I agreed with that, but can you give the exact steps on how to update the rules manually? I dont know how to unzip the rules, neither ftp.
IŽll apreciate your help. |
|
|
|
|
|
