RE: [Snort-users] portscan2-ignoreports...anyone get it to work???

[Erek Adams <erek () snort org>]

On Mon, 24 Mar 2003, Jeff Oliveto wrote:

> It would be "nice" if someone would update the snort.conf for the
> portscan2 preprocessor.  This guessing and hunting the newsgroups for
> information on how to configure the preprocessor is a waste of time.

Agreed.  It does NEED to be in the docs.  This was something added in
during the last update, and wasn't listed as a 'production' feature.
snort.conf doesn't get updated until things are 'production' status.
Many users are on the CVS commits list and keep up with the new additions
to the code.  Those folks may use/run untested/undocumented features...
They may not.  It's all up to you.

But for the best docs...  The manual covers everything production in
1.9.1.  The FAQ covers quite a few common questions.  For the rest, I'd
suggest the code and/or mailing list.

And as for 'guessing and hunting'....  You missed the message [0] about
this _very_ topic that was sent over two days ago.  As I've said before,
check this [1] before getting frustrated.  And remember, it's good for the
Karma.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson

[0]     http://marc.theaimsgroup.com/?l=snort-users&m=104836289325671&w=2
[1]     http://marc.theaimsgroup.com/?l=snort-users&m=104230179003344&w=2


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users