Snort mailing list archives
Re: [Emerging-Sigs] Problems with new pulledpork 0.6.0 version
From: JJC <cummingsj () gmail com>
Date: Tue, 29 Mar 2011 07:53:18 -0600
I see the problem and will have an updated tarball up shortly! Thanks! JJC On Tue, Mar 29, 2011 at 7:41 AM, JJC <cummingsj () gmail com> wrote:
I'll have a look at this snortly, looks like my beta tester (me) missed something! On Tue, Mar 29, 2011 at 7:08 AM, Joel Esler <jesler () sourcefire com> wrote:Let JJ get a chance to look at 0.6.0. It's still early in the morning where he is :) J On Mar 29, 2011, at 8:38 AM, carlopmart wrote:On 03/29/2011 01:46 PM, Kevin Ross wrote:No I don't think so. In 0.5.0 of pulled pork I had the file like scada.rules,1:XXXXX,1:XXXXX,emerging-scada.rules etc then it did not like that when I went to 0.6.0. I tried changing the text to match the new format (i.e ET-scada, ET-emerging-scada, ET-scada.rules etc) but none of them worked and I still get the error. When I removed all non-numerical stuff from the file (you can have it on seperate lines)itworks. No idea if the way to define an entire rule file is nowsomethingelse or it is a bug.Kevin, can you psot some sample disablesid.conf?? I am trying some alternatives, and doesn't works for me ... -- CL Martinez carlopmart {at} gmail {d0t} com------------------------------------------------------------------------------Enable your software for Intel(R) Active Management Technology to meetthegrowing manageability and security demands of your customers. Businesses are taking advantage of Intel(R) vPro (TM) technology - will yoursoftwarebe a part of the solution? Download the Intel(R) Manageability Checker today! http://p.sf.net/sfu/intel-dev2devmar _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users-- Joel Esler http://blog.snort.org | http://vrt-blog.snort.org | http://blog.clamav.net Twitter: http://twitter.com/snort _______________________________________________ Emerging-sigs mailing list Emerging-sigs () emergingthreats net http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!
------------------------------------------------------------------------------ Enable your software for Intel(R) Active Management Technology to meet the growing manageability and security demands of your customers. Businesses are taking advantage of Intel(R) vPro (TM) technology - will your software be a part of the solution? Download the Intel(R) Manageability Checker today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Problems with new pulledpork 0.6.0 version carlopmart (Mar 29)
- Re: Problems with new pulledpork 0.6.0 version Kevin Ross (Mar 29)
- Re: Problems with new pulledpork 0.6.0 version carlopmart (Mar 29)
- Re: [Emerging-Sigs] Problems with new pulledpork 0.6.0 version Kevin Ross (Mar 29)
- Re: [Emerging-Sigs] Problems with new pulledpork 0.6.0 version carlopmart (Mar 29)
- Re: [Emerging-Sigs] Problems with new pulledpork 0.6.0 version Joel Esler (Mar 29)
- Re: [Emerging-Sigs] Problems with new pulledpork 0.6.0 version JJC (Mar 29)
- Re: [Emerging-Sigs] Problems with new pulledpork 0.6.0 version JJC (Mar 29)
- Re: [Emerging-Sigs] Problems with new pulledpork 0.6.0 version JJC (Mar 29)
- Re: Problems with new pulledpork 0.6.0 version carlopmart (Mar 29)
- Re: Problems with new pulledpork 0.6.0 version Kevin Ross (Mar 29)