Snort mailing list archives
Re: FP 17246
From: Nigel Houghton <nhoughton () sourcefire com>
Date: Thu, 14 Oct 2010 11:56:42 -0400
On Thu, 14 Oct 2010 11:44:18 -0400, Weir, Jason wrote:
Thanks Nigel - that's what I was looking for. Are the deleted rules published anywhere - I don't see any listed in the change logs for the subscription release
Well, rules that get deleted show as "modified". They still exist, they just get moved into the deleted.rules file (which is still in the tar ball) and "DELETED" gets added to the rule msg. So, old rules never really die, they just get moved. Not really deleted in the truest sense, but since nobody should be including the deleted.rules file in their snort.conf, for all intents and purposes they are effectively deleted. -- Nigel Houghton Head Mentalist SF VRT Department of Intelligence Excellence http://vrt-sourcefire.blogspot.com && http://labs.snort.org/ ------------------------------------------------------------------------------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today. http://p.sf.net/sfu/beautyoftheweb _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs
Current thread:
- FP 17246 Lay, James (Oct 14)
- Re: FP 17246 Weir, Jason (Oct 14)
- Re: FP 17246 Nigel Houghton (Oct 14)
- Re: FP 17246 Weir, Jason (Oct 14)
- Re: FP 17246 Weir, Jason (Oct 14)
- Re: FP 17246 Nigel Houghton (Oct 14)
- Re: FP 17246 Weir, Jason (Oct 14)
- Re: FP 17246 JJC (Oct 14)
- Re: FP 17246 Nigel Houghton (Oct 14)
- Re: FP 17246 Weir, Jason (Oct 14)
- Re: FP 17246 Lay, James (Oct 14)
- Re: FP 17246 Joel Esler (Oct 14)
- Re: FP 17246 Weir, Jason (Oct 14)