Re: Need help converting Snort 2.0 config to Snort 2.3

["Senthil Prabu.S" <prabu333 () hotpop com>]

Hi,
> I have been given a box with Snort 2.0 and been told to build a new one
> with Snort 2.3.  In my old snort.conf file I have:
>
> preprocessor portscan2: scanners_max 256, targets_max 1024, target_limit 5, 
> port_limit 20, timeout 60
>
> I am not finding it in Snort 2.3's snort.conf file.  I did find the
> flow-portscan but I am not sure how to convert what I had to the new way
> or if I am even looking in the correct place.

Fine, go for snort-2.3.2, it is most updated version.
Regarding your snort.conf file, you can find a snort.conf file
at the etc/ of snort source, you better replace ur snort.conf
with this one.

Also, the latest snort.conf needs updated classification.conf and many
such things, so it is better to copy the etc/ and rules/ directory from the
source to your snort working directory.


--
Senthil Prabu.S 




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users