[Emerging-Sigs] Modifysid??

Weir, Jason jason.weir at nhrs.org
Thu Oct 14 15:12:06 EDT 2010


Anyone see any problems with this - trying to disable all RBN rules 

modifysid * "^(.*ET RBN Known Russian Business Network IP *)$" | "#${1}"

It was working and all of the sudden stopped.

I know, I know - I could just comment out "include
$RULE_PATH/emerging-rbn.rules" in snort.conf

-J


_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.


More information about the Emerging-sigs mailing list