Pulled_Pork; designed to make your Snort rules fly! With the intent of handling all rules!

Yes, shared object rules are included in that!

%snort_pulled_pork_info = (

About => 'http://code.google.com/p/pulledpork/wiki/About',
Timeline => 'http://code.google.com/p/pulledpork/wiki/Timeline',

);

The name pulledpork was chosen because this code pulls the rules that you need! Yes, it is and can be that simple.

A new tarball is up => http://code.google.com/p/pulledpork/downloads/list , This one has the capability to fetch rules from 3rd party sites and multiple bug fixes!

You can also always grab the latest development snapshot, though I make no guarantees as to it's stability ;-) svn checkout http://pulledpork.googlecode.com/svn/trunk/ pulledpork-read-only

Note that there is also a google group "http://groups.google.com/group/pulledpork-users", so if you need help etc.. you can ask there or in #pulledpork or #snort on freenode

kthxbye

Snort and the Snort logo are trademarks or registered trademarks of Sourcefire, Inc.