decoder and preprocessor event rules

93 views
Skip to first unread message

MichaelS

unread,
Aug 18, 2014, 7:03:14 PM8/18/14
to pulledpo...@googlegroups.com
When PulledPork processes the .rules into a single snort.rules files how does PulledPork deal with the three sets of .rules below?

include $PREPROC_RULE_PATH/preprocessor.rules
include $PREPROC_RULE_PATH/decoder.rules
include $PREPROC_RULE_PATH/sensitive-data.rules

Are they are not automatically processed into the snort.rules file, how are they dealt with?

Thanks...
Reply all
Reply to author
Forward
0 new messages