Snort mailing list archives

Re: [Snort-users] snort and snort-rules/ET alerts


From: "Joel Esler (jesler)" <jesler () cisco com>
Date: Sun, 4 Dec 2016 13:54:05 +0000

Roger.  Thanks. 

--
Sent from my iPhone

On Dec 4, 2016, at 1:55 AM, "wkitty42 () windstream net" <wkitty42 () windstream net> wrote:

On 12/03/2016 09:54 PM, Joel Esler (jesler) wrote:
What do we need to fix?

hunh?? oh! i was speaking of another firewall product... as far as i'm concerned, you guys don't need to fix anything 
;)

--
Sent from my iPhone

On Dec 3, 2016, at 9:28 PM, "wkitty42 () windstream net" <wkitty42 () windstream net> wrote:

On 12/03/2016 12:17 PM, Michael Steele wrote:
However, anything that works will do because there are those that update
Snort and forget to change the snort_version in the pulledpork.conf every
time there is a version change.


that's why the key is to simply ask snort what version it is... even the
firewall software that i support takes a short cut and writes the snort
version to a data file but that doesn't take into account out-of-band
updates that install newer versions... i've pointed it out numerous times
over the years and while there are some other addons which do understand
and follow my lead, there's nothing been done on the other side of the
fence to alleviate the problem :shrug:


-- 
NOTE: No off-list assistance is given without prior approval.
      *Please keep mailing list traffic on the list* unless
      private contact is specifically requested and granted.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!


Current thread: