Re: [Snort-devel] i have only 600 rules in my snort3

"Maya Dagon \(mdagon\) via Snort-users" <[email protected]>
Newsgroups gmane.comp.security.ids.snort.general,gmane.comp.security.ids.snort.sigs
Message-ID <[email protected]>
Hi Dorian,

The path depends on your configuration. Are you including the rules from another file? Is it using relative path?

Thanks,
Maya

From: Snort-devel <[email protected]> on behalf of Dorian ROSSE via Snort-devel <[email protected]>
Reply-To: Dorian ROSSE <[email protected]>
Date: Saturday, February 26, 2022 at 6:46 AM
To: "[email protected]" <[email protected]>, "[email protected]" <[email protected]>, "[email protected]" <[email protected]>
Subject: Re: [Snort-devel] i have only 600 rules in my snort3

my rules are located under : '''/usr/local/etc/rules/rules$''' and '''/usr/local/etc/rules/so_rules$''',

should i down up in the root etc like thoses : '''/usr/local/etc/rules''' and '''/usr/local/etc/so_rules''' ?

thank you in advance for your answer lighted,

Regards.


Dorian ROSSE.
________________________________
De : Dorian ROSSE
Envoyé : vendredi 25 février 2022 16:43
À : [email protected] <[email protected]>; [email protected] <[email protected]>; [email protected] <[email protected]>
Objet : i have only 600 rules in my snort3

Hello,


i have this problem :

'''rule counts
       total rules loaded: 600
            builtin rules: 600
            option chains: 600
            chain headers: 1'''

ethtool is again broken then i have go more far,

why i have only 600 rules ?

i have succesfully installed pulledpork and downloaded the rules,

thank you in advance to help myself fully configured snort3,

Regards.


Dorian ROSSE.

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.