Snort mailing list archives
Re: Sourcefire VRT Certified Snort Rules Update2011-12-07
From: "Weir, Jason" <jason.weir () nhrs org>
Date: Thu, 8 Dec 2011 08:30:06 -0500
yup... I thought it was just me not paying attention.. -----Original Message----- From: Michael Scheidell [mailto:michael.scheidell () secnap com] Sent: Thursday, December 08, 2011 8:29 AM To: Weir, Jason; 'snort-sigs () lists sourceforge net' Subject: RE: [Snort-sigs] Sourcefire VRT Certified Snort Rules Update2011-12-07 Sure, but if I add the snort.conf file that is rules, overwritting my edited snort.conf file... It would be worst. Blog says they would use that var in a specific rule set. They didn't. They broke things. From: Weir, Jason [mailto:jason.weir () nhrs org] Sent: Thursday, December 08, 2011 8:27 AM To: Michael Scheidell; snort-sigs () lists sourceforge net Subject: RE: [Snort-sigs] Sourcefire VRT Certified Snort Rules Update2011-12-07 I was thinking that as well - but I'm sure it was in the snort.conf file bundled with the rules... -J -----Original Message----- From: Michael Scheidell [mailto:michael.scheidell () secnap com] Sent: Thursday, December 08, 2011 5:11 AM To: snort-sigs () lists sourceforge net Subject: Re: [Snort-sigs] Sourcefire VRT Certified Snort Rules Update2011-12-07 On 12/7/11 4:13 PM, Research wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sourcefire VRT Certified Snort Rules Update Synopsis: This release adds and modifies rules in several categories. you forgot to mention that you broke every snort installation that did not add FILE_DATA_PORTS to their *.conf files. -- Michael Scheidell, CTO _____________________________________________________________________________________________ Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
------------------------------------------------------------------------------ Cloud Services Checklist: Pricing and Packaging Optimization This white paper is intended to serve as a reference, checklist and point of discussion for anyone considering optimizing the pricing and packaging model of a cloud services business. Read Now! http://www.accelacomm.com/jaw/sfnl/114/51491232/
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Sourcefire VRT Certified Snort Rules Update 2011-12-07 Research (Dec 07)
- Re: Sourcefire VRT Certified Snort Rules Update 2011-12-07 Michael Scheidell (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Weir, Jason (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Michael Scheidell (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Weir, Jason (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Michael Scheidell (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Joel Esler (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Michael Scheidell (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Joel Esler (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Michael Scheidell (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Joel Esler (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Weir, Jason (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update 2011-12-07 Michael Scheidell (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Nigel Houghton (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update2011-12-07 Joel Esler (Dec 08)
- Re: Sourcefire VRT Certified Snort Rules Update 2011-12-07 Michael Scheidell (Dec 08)