Snort mailing list archives

Re: More poorly performing GID 3 rules....


From: Matt Olney <molney () sourcefire com>
Date: Wed, 3 Feb 2010 12:59:25 -0500

Short answer:  MS isn't the only entitiy where we are under
contractual obligations.  I'll put in bugs to have these reviewed.

Busy Matt

On Wed, Feb 3, 2010 at 12:49 PM, Guise McAllaster
<guise.mcallaster () gmail com> wrote:
More poorly performing GID 3 rules that I cannot understand without
reversing because they are compiled and the source is not released.

7019 - P2P WinNY connection attempt
8351 - BAD-TRAFFIC PGM nak list overflow attempt

Srsly, is there any good reason these are protected by closed source?
Maybe I can understand 8351 if it is part of your deal with MS but
WinNY???  And don't get me started on the SMB hogs....

Guise

------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs


------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs


Current thread: