Snort mailing list archives
Re: Snort.conf updates have been posted
From: Joel Esler <jesler () sourcefire com>
Date: Wed, 10 Oct 2012 09:27:35 -0400
1. This is for all currently shipping versions. I updated all the snort.confs at the link below. 2. I'm unaware if ET has coverage for the vulnerabilities that we require for that port. -- Joel Esler Senior Research Engineer, VRT OpenSource Community Manager Sourcefire On Oct 10, 2012, at 2:55 AM, Amm Snort <ammdispose-snort () yahoo com> wrote:
Just a minor query. 1) Is this applicable just for new beta version or it works for 2.9.3.1 too? 2) Will this work if I am using ET rules? Thanks and regards, Amm. From: Joel Esler <jesler () sourcefire com> To: "snort-users () lists sourceforge net list" <snort-users () lists sourceforge net>; snort-sigs <snort-sigs () lists sourceforge net> Sent: Wednesday, 10 October 2012 1:16 AM Subject: [Snort-users] Snort.conf updates have been posted http://blog.snort.org/2012/10/sourcefire-vrt-certified-snort-rules_9.html The following changes were made to the snort.conf: portvar HTTP_PORTS [80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9080,9090,9091,9443,9999,11371,55555] now reads: portvar HTTP_PORTS [80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9060,9080,9090,9091,9443,9999,11371,55555] (Addition of 9060)
------------------------------------------------------------------------------ Don't let slow site performance ruin your business. Deploy New Relic APM Deploy New Relic app performance management and know exactly what is happening inside your Ruby, Python, PHP, Java, and .NET app Try New Relic at no cost today and get our sweet Data Nerd shirt too! http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Snort.conf updates have been posted Joel Esler (Oct 09)
- Re: [Snort-sigs] Snort.conf updates have been posted AllowOverride (Oct 09)
- Re: [Snort-sigs] Snort.conf updates have been posted Joel Esler (Oct 09)
- Re: [Snort-sigs] Snort.conf updates have been posted AllowOverride (Oct 09)
- Re: [Snort-sigs] Snort.conf updates have been posted Jefferson, Shawn (Oct 09)
- Re: [Snort-sigs] Snort.conf updates have been posted Joel Esler (Oct 09)
- Re: [Snort-sigs] Snort.conf updates have been posted Joel Esler (Oct 09)
- Re: [Snort-sigs] Snort.conf updates have been posted AllowOverride (Oct 09)
- Re: Snort.conf updates have been posted Amm Snort (Oct 09)
- Re: Snort.conf updates have been posted Joel Esler (Oct 10)
- Re: Snort.conf updates have been posted Matt Jonkman (Oct 10)
- Re: Snort.conf updates have been posted waldo kitty (Oct 10)
- Re: Snort.conf updates have been posted waldo kitty (Oct 10)