Skip to content

Instantly share code, notes, and snippets.

@mhawkins

mhawkins/oinkmaster-stories.txt

Forked from bryanl/gist:42630
Created January 2, 2009 18:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save mhawkins/42632 to your computer and use it in GitHub Desktop.
Save mhawkins/42632 to your computer and use it in GitHub Desktop.
Download ZIP
oinkmaster stories
Raw
oinkmaster-stories.txt
A User through Oinkmaster's config disables rules in a downloaded rule pack to remove unwanted rules.
A User through Oinkmaster's config modifies rules in a downloaded rule pack to customize rules for his environment.
A User through Oinkmaster's config ignores files in a downloaded rule pack to remove unwanted rule categories.
A User through Oinkmaster's config enables rules disabled in a downloaded rule pack to include deprecated rules he wants to run.
A User through Oinkmaster's config prevents updated rules from being copied to the Snort installation so it will not override an older version of the rule he wants to run.
A User running Oinkmaster compares the rules in a downloaded pack to the rules already installed to determine which rules downloaded are to be copied over.
A User running Oinkmaster downloads one or more rule packs to update their Snort installation so his server will have current rules.
A User running Oinkmaster downloads rule packs over http to get rules from Snort.org or BleedingSnort.
A User running Oinkmaster copies new rules to the Snort installation so his server will have current rules.
A User running Oinkmaster copies modified rules to the Snort installation so his server will have current rules.
A User running Oinkmaster copies updated rules to the Snort installation so his server will have current rules.
A User running Oinkmaster reports changes to the rules in the Snort installation to update the Snort installation.
A User running Oinkmaster saves downloaded rule packs to a location for redistribution to other sensors.
A User running additional IDS sensors downloads a preprocessed rule pack over ftp to capitalize on the customization work done by another sensor.
A User running additional IDS sensors downloads a preprocessed rule pack over scp to capitalize on the customization work done by another sensor.
A User running Oinkmaster passes additional configuration values via the command line.
A User running Oinkmaster can use pure Perl libraries for retrieving and process rule packs to allow Oinkmaster to run on Windows.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment