A few poeple have asked about this so I commited a patch that makes it
possible to download any number of rules archives from different URLs at
the same time, e.g.:
oinkmaster.pl -o rules \
-u http://www.snort.org/dl/rules/snortrules-snapshot-CURRENT.tar.gz \
-u http://www.bleedingsnort.com/bleeding.rules.tar.gz
You can also specify multiple url=<url> in oinkmaster.conf, but command
line overrides them just like before.
I still think it's often much better to run Oinkmaster once for each URL
and with different output directories though. For example, as all
downloaded files will be put in the same output directory even when
getting multiple rules archives, there is going to be problems if the
same filename exists in multiple archives (Oinkmaster will detect
this and exit before touching anything).
If you're interested in this feature, please get the latest cvs snapshot
from http://oinkmaster.sourceforge.net/oinkmaster-snapshot.tar.gz (at
your own risk) and let me know how it works.
Since I'm not a perl programmer (or any type of programmer for that
matter), would it be possible for you to include something like
a commented out example of how to chain some of these scripts together?
As an example, I'd like to see something towards the end of the rules
update script that would call the create-sidmap.pl script to regenerate
the sid-msg.map file automatically.
I'm actually running snort and oinkmaster on a Win32 box and don't want
to learn how to write scipts, etc, for it.
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
