Snort mailing list archives

Re: 2955 sigs for registered users


From: <wkitty42 () windstream net>
Date: Thu, 10 Oct 2013 20:53:34 -0400


On Wednesday, October 9, 2013 9:37 PM, Joel Esler <jesler () sourcefire com> wrote: 
 
On Oct 9, 2013, at 9:14 PM, <wkitty42 () windstream net> wrote: 
 
We are using the dynamic detection rules, so reverting to 2953 isn't an 
option. 

you can compile 2953's so rules for 2955 with possibly a slight modification 
or two to the makefile... it isn't that hard to do... IIRC, the main one was 
related to the engine version... 
 
The open ones, yes. But things like our truffle rules: 
 
http://vrt-blog.snort.org/2013/10/ie-zero-day-cve-2013-3897-youve-been.html 
 
We ship those precompiled. 

those would be shipped to paying clients, then... right? just registered folks wouldn't even know about them, right?



------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: