Snort.conf gets overwritten

  • I have an issue with snort every time I make a change in the snort.conf it gets over written when the system boots up or when there is an update. How can I tweak the system to keep my settings & rules static after each reboot and update? I've looked at all of the snort code (php, conf, inc, xml….etc) and no luck whatever I do it gets a system override.  Any help would be appreciated. :)

  • This is normal.  You need to modify the code in /usr/local/pkg/

  • ok I will start there thanks for the quick response

Log in to reply