[prev in list] [next in list] [prev in thread] [next in thread]
List: snort-sigs
Subject: [Snort-sigs] a question for Michael Shirk
From: Dorian ROSSE via Snort-sigs <snort-sigs () lists ! snort ! org>
Date: 2020-01-11 9:44:11
Message-ID: AM0PR08MB499637CB10652F8A0FC1D3C4DA3B0 () AM0PR08MB4996 ! eurprd08 ! prod ! outlook ! com
[Download RAW message or body]
Hello dear Michael Shirk,
I have found this doc on my own pulledpork :
Update README.CATEGORIES
Appended a solution to get a list of all categories when they are changed or new.
Removed and wrote the current list of categories.
Replaced "-=" and "=-" which caused all rules to be disabled, and changed to "##".
How to get the current categories (the categories get renamed and changed without \
notice.): 1.) Configure the rules you want (ET,VRT,Pro,w/OinkCode) pulledpork.pl
2.) Execute the download: /usr/local/bin/pulledpork.pl -c /etc/snort/pulledpork.conf \
-Pw 3.) Execute this one-liner: lz /var/tmp/*.gz | egrep '\.rules' | cut -d'/' -f3 | \
sort -u | perl -lne '/(.*).rules/ && print $1' > rules.`date +%F
I will run this command line on my home network but must I launch this command line \
on my red hat server where I have firstly create this fork for sanitize against \
e-mail and malware by go-pkg dev works ?
Thank you in advance to asnwer my question,
Regards.
Dorian ROSSE (azaretdodo on github).
[Attachment #3 (text/html)]
<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"> <head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="FR" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> \
Hello dear Michael Shirk,<br> <br>
<br>
I have found this doc on my own pulledpork :<br>
<br>
<b>Update README.CATEGORIES<o:p></o:p></b></p>
<p class="MsoNormal"><b><o:p> </o:p></b></p>
<p class="MsoNormal"><b>Appended a solution to get a list of all categories when they \
are changed or new.<o:p></o:p></b></p> <p class="MsoNormal"><b>Removed and wrote the \
current list of categories.<o:p></o:p></b></p> <p class="MsoNormal"><b>Replaced \
"-=" and "=-" which caused all rules to be disabled, and changed \
to "##".<o:p></o:p></b></p> <p \
class="MsoNormal"><b><o:p> </o:p></b></p> <p class="MsoNormal"><b>How to get the \
current categories (the categories get renamed and changed without \
notice.):<o:p></o:p></b></p> <p class="MsoNormal"><b>1.) Configure the rules you want \
(ET,VRT,Pro,w/OinkCode) pulledpork.pl<o:p></o:p></b></p> <p class="MsoNormal"><b>2.) \
Execute the download: /usr/local/bin/pulledpork.pl -c /etc/snort/pulledpork.conf \
-Pw<o:p></o:p></b></p> <p class="MsoNormal" style="margin-bottom:12.0pt"><b>3.) \
Execute this one-liner: lz /var/tmp/*.gz | egrep '\.rules' | cut -d'/' -f3 | sort -u \
| perl -lne '/(.*).rules/ && print $1' > rules.`date +%F<br> <br>
<br>
</b><u>I will run this command line on my home network but must I launch this command \
line on my red hat server where I have firstly create this fork for sanitize against \
e-mail and malware by go-pkg dev works ?</u><b><br> <br>
</b>Thank you in advance to asnwer my question,<br>
<br>
Regards.<br>
<br>
<br>
Dorian ROSSE (azaretdodo on github).<b><o:p></o:p></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.snort.org
https://lists.snort.org/mailman/listinfo/snort-sigs
Please visit http://blog.snort.org for the latest news about Snort!
Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up \
to date to catch the most <a href=" \
https://snort.org/downloads/#rule-downloads">emerging threats</a>!
--===============3432550777796681533==--
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic