These forums have been switched to read-only mode as of March 1, 2011. The content that already existed here will be retained for posterity. No new posts will be accepted here. For more information and for the address of the new forums, see this page: http://snort.org/community/groups

Do the new VRT rules replace the older rules?!

Subscribe to Do the new VRT rules replace the older rules?! 2 post(s), 2 voice(s)

 
Avatar g4hsean 2 post(s)

Empty_starEmpty_starEmpty_starEmpty_starEmpty_star

Hello, my main question is this. Do the new rules replace the old rules or are they suppose to be added to the old rule files? right now i cheat and i put all rules into one rule file which i name all-rules.rules.

I’m just worried that i might be adding duplicates to the file instead of having one instance of every rule.

P.S yes i do configure the rules for optimal performance.

Thanks for your time and have a great day!

 
Avatar lebowski76 120 post(s)

Empty_starEmpty_starEmpty_starEmpty_starEmpty_star

All scenarios are possible; rules can be added, deleted or modified.
I suggest using Oinkmaster for updating rules, it’s a great tool and provides all functionality you need.


©2009 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved. Terms of Use | Privacy Policy