Snort configuration/ rules file

bripage · 09-25-2002, 09:32 PM

Im supposed to create a rules file (configuration) for snort dealing with my network. The only problem is that I dont know what is supposed to be in it. The readme on it gives me some general clues, but not specifics... hmmph.

RijilV · 09-26-2002, 12:34 AM

have you read the docs online? they're very good and there are quite a few default examples.

there is even a website out there that will generate custom snort rule sets for you.

can I have you job? I really need one that pays more than factory work.

unSpawn · 09-26-2002, 04:52 AM

No, you don't need to create a rules file, but scrub your config for rules to include. Rule files are ones that hold the signatures. The config is in the snort tarball, and each time you update there's also one in that tarball.