Manual download of Snort rules
-
I'm having problems getting pfSense to download the Snort rules directly but I've been able to download them myself via a browser.
Is it possible to manually upload the ruleset to pfSense?
-
Ok, I downloaded the rules file and MD5 file to a local webserver and then changed the PHP scripts to get the files from the local web server. That allowed pfSense to get the rules file successfully and start to extract the rules.
Now I'm wondering how long it normally takes to extract the rules? It seems to be taking an extraordinarily long time. There was lots of disk activity for a while but now disk activity seems to have ceased but the status still shows "Extracting snort rules…".
I should add that I'm running all this on a Pentium MMX 200MHz, 128MB RAM, 1.5GB hard disk. Everyone's going to tell me that this is way underspecced for Snort, aren't you....
-
Underspeced ;)
128 MB RAM is the minimum.
I dont use snort myself but from what i read it's a memory hog. -
Ah well, thanks. :-)
I'll try Snort on some better hardware.