search

shirkdog / pulledpork

Pulled Pork for Snort and Suricata rule management (from Google code)
GNU General Public License v2.0
417 stars 134 forks source link

Modify script to handle Snort2 and Snort3 SO rule differences #362

Closed redbaron4 closed 3 years ago

redbaron4 commented 3 years ago

This PR modifies the Pulledpork script to handle shared object rules under both Snort2 and Snort3

It uses a new variable Snortv3 which is set to 1 if Snort3 is detected.

NOTE - Under Snort3, the distro names have changed. They should be centos instead of RHEL-7 under Snort2. It is user responsibility to set the distro correctly in config based on Snort version.