Snort mailing list archives
RE: [Snort-users] portscan2-ignoreports...anyone get it to work???
From: Erek Adams <erek () snort org>
Date: Mon, 24 Mar 2003 11:57:08 -0500 (EST)
On Mon, 24 Mar 2003, Jeff Oliveto wrote:
It would be "nice" if someone would update the snort.conf for the portscan2 preprocessor. This guessing and hunting the newsgroups for information on how to configure the preprocessor is a waste of time.
Agreed. It does NEED to be in the docs. This was something added in during the last update, and wasn't listed as a 'production' feature. snort.conf doesn't get updated until things are 'production' status. Many users are on the CVS commits list and keep up with the new additions to the code. Those folks may use/run untested/undocumented features... They may not. It's all up to you. But for the best docs... The manual covers everything production in 1.9.1. The FAQ covers quite a few common questions. For the rest, I'd suggest the code and/or mailing list. And as for 'guessing and hunting'.... You missed the message [0] about this _very_ topic that was sent over two days ago. As I've said before, check this [1] before getting frustrated. And remember, it's good for the Karma. Cheers! ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson [0] http://marc.theaimsgroup.com/?l=snort-users&m=104836289325671&w=2 [1] http://marc.theaimsgroup.com/?l=snort-users&m=104230179003344&w=2 ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- portscan2-ignoreports...anyone get it to work??? Jeff Oliveto (Mar 20)
- Re: portscan2-ignoreports...anyone get it to work??? Matt Kettler (Mar 20)
- Re: [Snort-users] portscan2-ignoreports...anyone get it to work??? Erek Adams (Mar 24)
- RE: [Snort-users] portscan2-ignoreports...anyone get it to work??? Jeff Oliveto (Mar 25)
- RE: [Snort-users] portscan2-ignoreports...anyone get it to work??? Erek Adams (Mar 24)
- Re: [Snort-users] portscan2-ignoreports...anyone get it to work??? Chris Green (Mar 26)
- RE: [Snort-users] portscan2-ignoreports...anyone get it to work??? Jeff Oliveto (Mar 25)