Snort mailing list archives

Re: Snort.conf updates have been posted


From: Matt Jonkman <mjonkman () emergingthreatspro com>
Date: Wed, 10 Oct 2012 09:19:37 -0400

On #2: won't affect use of the ET Open or Pro rules.

Thanks for the heads up Joel!

Matt

On Wed, Oct 10, 2012 at 2:55 AM, Amm Snort <ammdispose-snort () yahoo com> wrote:
Just a minor query.
1) Is this applicable just for new beta version or it works for 2.9.3.1 too?
2) Will this work if I am using ET rules?

Thanks and regards,

Amm.

________________________________
From: Joel Esler <jesler () sourcefire com>
To: "snort-users () lists sourceforge net list"
<snort-users () lists sourceforge net>; snort-sigs
<snort-sigs () lists sourceforge net>
Sent: Wednesday, 10 October 2012 1:16 AM
Subject: [Snort-users] Snort.conf updates have been posted

http://blog.snort.org/2012/10/sourcefire-vrt-certified-snort-rules_9.html

The following changes were made to the snort.conf:

portvar HTTP_PORTS
[80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9080,9090,9091,9443,9999,11371,55555]

now reads:

portvar HTTP_PORTS
[80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9060,9080,9090,9091,9443,9999,11371,55555]

(Addition of 9060)


------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort
news!



-- 

----------------------------------------------------
Matt Jonkman
Emerging Threats Pro
Open Information Security Foundation (OISF)
Phone 866-504-2523 x110
http://www.emergingthreatspro.com
http://www.openinfosecfoundation.org
----------------------------------------------------

------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: