Snort mailing list archives

Re: Snort 2.8.1 Release Candidate Now Available


From: "Justin Heath" <justin.heath () gmail com>
Date: Wed, 26 Mar 2008 17:29:59 -0400

This should not affect your rule writing. However, dynamic attributes should
help define your stream and frag policies on the fly with the assistance of
an asset identification tool.


Cheers,
Justin

On Wed, Mar 26, 2008 at 2:14 PM, Patrik Nordlén <patrik.nordlen () sentor se>
wrote:

On Wednesday 12 March 2008 16.18.26 Snort Releases wrote:
Hi everybody,

A release candidate version of Snort 2.8.1 is now available on
snort.org, at http://www.snort.org/dl/

Feature highlights:

* Support for target-based attribute tables
[...]

This feature seems VERY cool and a great step forward for Snort! I browsed
through the manual for 2.8.1rc and found some information on how the file
containing the attribute tables should be formatted - however I found no
further information on how to actually use this new functionality when
writing rules. I guess this will be added in the documentation before the
final 2.8 comes out, but could someone in the know shed some light on this
until then? Also, I'm curious as to whether this means all current rules
will
soon be rewritten to use these attributes primarily.

Cheers,
Patrik

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.

http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users<https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: