Snort mailing list archives
Re: Question regarding the use of the terms "enabled" and "disabled" as it applies to SourceFire VRT Rules
From: Joel Esler <jesler () sourcefire com>
Date: Mon, 13 Apr 2009 14:21:27 -0400
Think of Enabled vs Disabled being "On or off" by default. So 7567 is off by default, but in the ruleset in the SPYWARE-PUT file. J On Apr 13, 2009, at 2:06 PM, Stephen Mullins wrote:
Hello, As seen in this changelog (http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2006-08-22.html ), what do the words "enabled" or "disabled" mean? 7567 <-> Disabled <-> SPYWARE-PUT Trackware funwebproducts mywebsearchtoolbar-funtools runtime detection (spyware-put.rules) Rule 7567 is still in the most recent rule packs so it obviously doesn't mean that the rule itself is being removed or "disabled" in the sense that it is no longer in effect. If anyone could clarify I would appreciate it. Thanks, Steve Mullins ------------------------------------------------------------------------------ This SF.net email is sponsored by: High Quality Requirements in a Collaborative Environment. Download a free trial of Rational Requirements Composer Now! http://p.sf.net/sfu/www-ibm-com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Joel Esler T: 302-223-5974 (-) Gtalk: jesler () sourcefire com [m] ------------------------------------------------------------------------------ This SF.net email is sponsored by: High Quality Requirements in a Collaborative Environment. Download a free trial of Rational Requirements Composer Now! http://p.sf.net/sfu/www-ibm-com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Question regarding the use of the terms "enabled" and "disabled" as it applies to SourceFire VRT Rules Stephen Mullins (Apr 13)
- Re: Question regarding the use of the terms "enabled" and "disabled" as it applies to SourceFire VRT Rules Joel Esler (Apr 13)
- Re: Question regarding the use of the terms "enabled" and "disabled" as it applies to SourceFire VRT Rules JJ Cummings (Apr 13)