snortconfig
snortconfig is a rules modification system for snort that is generated from a configuration file. This allows a user to keep their ruleset updated without too much of a headache. Configuration is done using a basic INI style configuration.
snortconfig supports three methods of configuration of rules. The methods are specifing what rules to apply changes to. These methods are files, sids, and classifications. This allows make broad changes to snort rules very quickly.
- LICENSE
- EXAMPLE.config An example for normal users
- HONEYNET.config - An example for honeynet users
- snortconfig.8 - snortconfig manual
NOTE
snortconfig is an executable provided by a Snort parsing module that I am maintaining. It is installed with the distribution of Net::Snort::Parser.
CVS
Download
Latest Changes
- Add support for port lists, which is available in Snort 2.8.0