http://www.snort.org/docs/writing_rules/ < -- that is basically the
"Snort Users Manual" so grab it, you can also grab it via PDF.

Hughes, Andy wrote:

> Hi all
> New to snort. Have looked high and fairly low for info on pass rules,
> and other than references to the fact that I should write them and use
> them, and that I should then use the -o argument, I am not finding
> the info on how to write one nor exactly where to put the rule if I
> did write one. Can someone point me in the direction?
>
> TIA,
>
> Andy Hughes
> Systems Engineer
> Aquilent, Inc
> (301) 939-1430
> 1100 West Street
> Laurel, MD 20707
>

-- 
The secret to success is to start from scratch and keep on scratching.
-------------------------------------------------------
This sf.net email is sponsored by: Influence the future 
of Java(TM) technology. Join the Java Community 
Process(SM) (JCP(SM)) program now. 
http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0002en
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]