Snort mailing list archives
Re: Rules with SDF options cannot have other detection options in the same rule
From: Joel Esler <jesler () sourcefire com>
Date: Tue, 1 Feb 2011 13:56:45 -0500
That's not right. I'll bug this on our side for our developers to take a look. Joel On Tue, Feb 1, 2011 at 1:53 PM, Michael Scheidell < michael.scheidell () secnap com> wrote:
On 2/1/11 1:48 PM, Joel Esler wrote: And the only difference is to add in the --enable-flexresp3? Joel yes. then everything is fine. I might mention that I also have to oinkmaster out resp:* rules also, but that I expected. I didn't expect sensitive data rules to fail. I am regres testing ports build options that a user can select. looking for combination that don't work, won't build, or won't work with VRT rules, ET rules, etc. -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 ISN: 1259*1300*| *SECNAP Network Security Corporation- Certified SNORT Integrator - 2008-9 Hot Company Award Winner, World Executive Alliance - Five-Star Partner Program 2009, VARBusiness - Best in Email Security,2010: Network Products Guide - King of Spam Filters, SC Magazine 2008 ------------------------------ This email has been scanned and certified safe by SpammerTrap®. For Information please see http://www.secnap.com/products/spammertrap/ ------------------------------
-- Joel Esler Skype:eslerjoel http://blog.snort.org && http://blog.clamav.net
------------------------------------------------------------------------------ Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Rules with SDF options cannot have other detection options in the same rule Michael Scheidell (Feb 01)
- Re: Rules with SDF options cannot have other detection options in the same rule Joel Esler (Feb 01)
- Re: Rules with SDF options cannot have other detection options in the same rule Michael Scheidell (Feb 01)
- Re: Rules with SDF options cannot have other detection options in the same rule Joel Esler (Feb 01)
- Re: Rules with SDF options cannot have other detection options in the same rule Michael Scheidell (Feb 01)
- Re: Rules with SDF options cannot have other detection options in the same rule Michael Scheidell (Feb 01)
- Re: Rules with SDF options cannot have other detection options in the same rule Joel Esler (Feb 01)
- Re: Rules with SDF options cannot have other detection options in the same rule waldo kitty (Feb 01)
- Re: Rules with SDF options cannot have other detection options in the same rule Joel Esler (Feb 01)
- Re: Rules with SDF options cannot have other detection options in the same rule Michael Scheidell (Feb 01)
- Re: Rules with SDF options cannot have other detection options in the same rule Joel Esler (Feb 01)