Re: [Snort-users] snort and snort-rules/ET alerts

["Joel Esler (jesler)" <jesler () cisco com>]

What do we need to fix?

--
Sent from my iPhone

> On Dec 3, 2016, at 9:28 PM, "wkitty42 () windstream net" <wkitty42 () windstream net> wrote:
>
> > On 12/03/2016 12:17 PM, Michael Steele wrote:
> > However, anything that works will do because there are those that update
> > Snort and forget to change the snort_version in the pulledpork.conf every
> > time there is a version change.
>
>
> that's why the key is to simply ask snort what version it is... even the firewall software that i support takes a 
> short cut and writes the snort version to a data file but that doesn't take into account out-of-band updates that 
> install newer versions... i've pointed it out numerous times over the years and while there are some other addons 
> which do understand and follow my lead, there's nothing been done on the other side of the fence to alleviate the 
> problem :shrug:
>
>
> -- 
> NOTE: No off-list assistance is given without prior approval.
>       *Please keep mailing list traffic on the list* unless
>       private contact is specifically requested and granted.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!