Snort mailing list archives
Re: Rule performance profiling question
From: waldo kitty <wkitty42 () windstream net>
Date: Thu, 16 Sep 2010 11:27:20 -0400
On 9/16/2010 09:19, Joel Esler wrote:
No. My guess was that waldo kitty was not running SO rules, and that's why they weren't loaded in his config.
this is exactly correct... i am not currently running the SO rules due to recent upgrades to snort and other factors among which is the necessity to figure out which SO rules set will properly operate in my environment... plus with the recent notification that older environments are no longer going to be serviced, that makes it a bit harder and may very well turn out that the SO rules simply cannot be used in said environment :?
Which he agreed with in a different part of the email thread. J On Thu, Sep 16, 2010 at 9:07 AM, Andy Berryman <aberryman () cymtec com <mailto:aberryman () cymtec com>> wrote: Joel wrote that they “both are SO rules.” What does that have to do with it? Does it make a difference that they are so rules?
------------------------------------------------------------------------------ Start uncovering the many advantages of virtual appliances and start using them to simplify application deployment and accelerate your shift to cloud computing. http://p.sf.net/sfu/novell-sfdev2dev _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Rule performance profiling question Andy Berryman (Sep 15)
- Re: Rule performance profiling question Alex Kirk (Sep 15)
- Re: Rule performance profiling question Andy Berryman (Sep 16)
- Re: Rule performance profiling question Joel Esler (Sep 16)
- Re: Rule performance profiling question waldo kitty (Sep 16)
- Re: Rule performance profiling question waldo kitty (Sep 16)
- Re: Rule performance profiling question Joel Esler (Sep 16)
- Re: Rule performance profiling question Andy Berryman (Sep 16)
- Re: Rule performance profiling question Alex Kirk (Sep 15)
- Re: Rule performance profiling question Joel Esler (Sep 15)
- Re: Rule performance profiling question waldo kitty (Sep 15)
- Re: Rule performance profiling question Joel Esler (Sep 15)
- Re: Rule performance profiling question waldo kitty (Sep 15)