Snort mailing list archives

Re: Sourcefire VRT Certified Snort Rules Update2011-12-07


From: "Weir, Jason" <jason.weir () nhrs org>
Date: Thu, 8 Dec 2011 08:30:06 -0500

yup...  I thought it was just me not paying attention..

        -----Original Message-----
        From: Michael Scheidell [mailto:michael.scheidell () secnap com] 
        Sent: Thursday, December 08, 2011 8:29 AM
        To: Weir, Jason; 'snort-sigs () lists sourceforge net'
        Subject: RE: [Snort-sigs] Sourcefire VRT Certified Snort Rules
Update2011-12-07
        
        

        Sure, but if I add the snort.conf file that is rules,
overwritting my edited snort.conf file...

         

        It would be worst.

         

        Blog says they would use that var in a specific rule set.

         

        They didn't.

         

        They broke things.

         

         

        From: Weir, Jason [mailto:jason.weir () nhrs org] 
        Sent: Thursday, December 08, 2011 8:27 AM
        To: Michael Scheidell; snort-sigs () lists sourceforge net
        Subject: RE: [Snort-sigs] Sourcefire VRT Certified Snort Rules
Update2011-12-07

         

        I was thinking that as well - but I'm sure it was in the
snort.conf file bundled with the rules...

         

        -J

                -----Original Message-----
                From: Michael Scheidell
[mailto:michael.scheidell () secnap com] 
                Sent: Thursday, December 08, 2011 5:11 AM
                To: snort-sigs () lists sourceforge net
                Subject: Re: [Snort-sigs] Sourcefire VRT Certified Snort
Rules Update2011-12-07

                On 12/7/11 4:13 PM, Research wrote: 

                -----BEGIN PGP SIGNED MESSAGE-----
                Hash: SHA1
                 
                 
                Sourcefire VRT Certified Snort Rules Update
                 
                Synopsis:
                This release adds and modifies rules in several
categories.
                 

                you forgot to mention that you broke every snort
installation that did not add FILE_DATA_PORTS to their *.conf files.
                
                

                -- 
                Michael Scheidell, CTO

_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
------------------------------------------------------------------------------
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

Current thread: