Snort mailing list archives
Re: [Emerging-Sigs] FATALs with snort-2.9.0.3
From: "evilghost () packetmail net" <evilghost () packetmail net>
Date: Tue, 21 Dec 2010 10:42:53 -0600
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 12/21/10 10:30, Joel Esler wrote: Hi,
Yes, we greatly improved error checking on Snort 2.9.0.3: http://blog.snort.org/2010/12/snort-2903-is-coming-soon.html We are going to put a blog post up about it soon.
Did you notify ET of these issues or just post them on the blog? I don't recall seeing this one on the list so it may have been direct to the ET crew. Quoted below: "This is another issue found internally while troubleshooting for Emerging-Threats. VRT rules are not affected by this change. If rule writers have invalid combinations that existed in custom rules (depth with within, or distance with no relative content match, etc) Snort will now error on this. The Snort Manual has been updated to reflect these facts." I imagine you've already reached out to the ET crew and just didn't rely on the blog entry only to notify ET of these issues. I likely missed the communication with ET so I'll bite my tongue with respect to what exactly "OpenSource community" is.
Joel
- -evilghost -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJNENkNAAoJENgimYXu6xOHCrEP/2Ocp7O2XygI8aLSyRPbiQYt jlCjOJm+WUHVDWR6mhVNIZ1EdGollhgGrDapaj13kN6QbirJj/Lgvb5nNvHcLpxX ZGiLeDCh7AW33h7oE7dbrozgLvjJBJU4hoAN80sqH3DmArZG9fpmPydZFgfAzZMq pqtzTU7npdFARdwJB8ASaMjBiRek8wYogq59UJaLRb4azgeqaunGxL1P/RTqkjmP 0HfCqjrPS01LCaRo99Z+OFo/yb5C6l38+2p7TKyV1A59CxFzA8+7FUHsmqo+u8RN 2EZikVdXz6IizIgrn2rS3Ju1Ijt4B82PWwiFkDcBXdC6MHF23+FthzLQ27Y3d625 7thzwGNXaKe+3nk2KX4fSj4ESzQUsmJjOvoiTZeIP6+D3fyrBOJcjsyqxeKg6p3j OSxz48ZUd81sjVj4OeJNj+XXyczW2AJ+9DwvdCk/avIMQCjpvUUYFz8fa7dh6NHT bKOOa2wLGk4SJfEotgiwu4rgPJQR+j+k49C0B0icwzwQ4vFK1ipYGApDvXbLmIUi 5zVKK7XrjKyUk1S5MughE11qz+GCcnDXYcOnlpF0fKkP/Uhgh6UKiHb9nib+7LOq xtXTt35LaddB5XXQj/txchgtA6Z2/pwGmVmvtWcISZ0TnTTO53AEQlV/zluZqZw5 Jkn/1H90mfQCKAvkcC/X =6g1/ -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Forrester recently released a report on the Return on Investment (ROI) of Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even within 7 months. Over 3 million businesses have gone Google with Google Apps: an online email calendar, and document program that's accessible from your browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- FATALs with snort-2.9.0.3 Lay, James (Dec 21)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Matthew Jonkman (Dec 21)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Joel Esler (Dec 22)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Lay, James (Dec 22)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Matthew Jonkman (Dec 22)
- Re: [Spam] Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Lay, James (Dec 22)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Joel Esler (Dec 22)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Matthew Jonkman (Dec 21)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 evilghost () packetmail net (Dec 22)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Joel Esler (Dec 21)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 evilghost () packetmail net (Dec 22)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Matthew Jonkman (Dec 21)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Joel Esler (Dec 21)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 Matthew Jonkman (Dec 21)
- Re: [Emerging-Sigs] FATALs with snort-2.9.0.3 evilghost () packetmail net (Dec 22)