Re: Latest snort.conf

["Weir, Jason" <jason.weir () nhrs org>]

That's perfect - thanks Joel - some documentation coming your way
tomorrow..

-J

> -----Original Message-----
> From: Joel Esler [mailto:jesler () sourcefire com] 
> Sent: Tuesday, December 06, 2011 4:27 PM
> To: Weir, Jason
> Cc: snort-users () lists sourceforge net
> Subject: Re: [Snort-users] Latest snort.conf
>
>
> http://blog.snort.org/2011/12/vrt-snortconf-example-files.html
>
> Joel
>
> On Dec 6, 2011, at 1:58 PM, Weir, Jason wrote:
>
> > TY!!
> >
> > > -----Original Message-----
> > > From: Joel Esler [mailto:jesler () sourcefire com] 
> > > Sent: Tuesday, December 06, 2011 1:56 PM
> > > To: Weir, Jason
> > > Cc: snort-users () lists sourceforge net
> > > Subject: Re: [Snort-users] Latest snort.conf
> > >
> > >
> > > Keep your eye on the Snort.org blog (http://blog.snort.org)  
> > > I'll post it there.
> > >
> > >
> > > On Dec 6, 2011, at 1:22 PM, Weir, Jason wrote:
> > >
> > > > Perfect - thanks...  Let us know where it will be...
> > > >
> > > > -J
> > > >
> > > > > -----Original Message-----
> > > > > From: Joel Esler [mailto:jesler () sourcefire com] 
> > > > > Sent: Tuesday, December 06, 2011 12:46 PM
> > > > > To: Weir, Jason
> > > > > Cc: snort-users () lists sourceforge net
> > > > > Subject: Re: [Snort-users] Latest snort.conf
> > > > >
> > > > >
> > > > > I can do that.  I'll put it up on snort.org.
> > > > >
> > > > > However, the snort.conf that is distributed with the 
> > > > > registered user release for that version is appropriate to 
> > > > > that release.  
> > > > >
> > > > > Joel
> > > > >
> > > > > On Dec 6, 2011, at 12:34 PM, Weir, Jason wrote:
> > > > >
> > > > > > OK Joel - round 2..
> > > > > >
> > > > > > I'm documenting the snort install\config - I need the 
> > > > > latest snort.conf
> > > > > > long before I get to needing any rules and... 
> > > > > >
> > > > > > What if I'm not a subscriber\registered user and don't plan 
> > > > > on using the
> > > > > > VRT ruleset any way I can get the latest snort.conf?
> > > > > >
> > > > > > Seems an odd place to maintain the snort conf file as 
> > > it's not rule
> > > > > > specific...  Any chance of you guys providing a the latest 
> > > > > snort.conf or
> > > > > > a patch file somewhere other than the ruleset?
> > > > > >
> > > > > > Thanks,
> > > > > > Jason
> > > > > >
> > > > > > > -----Original Message-----
> > > > > > > From: Joel Esler [mailto:jesler () sourcefire com] 
> > > > > > > Sent: Tuesday, December 06, 2011 11:52 AM
> > > > > > > To: Weir, Jason
> > > > > > > Cc: snort-users () lists sourceforge net
> > > > > > > Subject: Re: [Snort-users] Latest snort.conf
> > > > > > >
> > > > > > >
> > > > > > > No problem.  It's good for people to have a refresher every 
> > > > > > > now and again.
> > > > > > >
> > > > > > > J
> > > > > > >
> > > > > > > On Dec 6, 2011, at 11:39 AM, Weir, Jason wrote:
> > > > > > >
> > > > > > > > Thanks Joel for the re-enforcing what I already knew...  
> > > > > > > I'm going back
> > > > > > > > through and redocumenting the install (quite a few upgraded 
> > > > > > > packages)
> > > > > > > > and forgot that's where you keep the latest conf file..
> > > > > > > >
> > > > > > > > Hopefully won't have to ask again..
> > > > > > > >
> > > > > > > > -J
> > > > > > > >
> > > > > > > > > -----Original Message-----
> > > > > > > > > From: Joel Esler [mailto:jesler () sourcefire com] 
> > > > > > > > > Sent: Tuesday, December 06, 2011 11:35 AM
> > > > > > > > > To: Weir, Jason
> > > > > > > > > Cc: snort-users () lists sourceforge net Users
> > > > > > > > > Subject: Re: [Snort-users] Latest snort.conf
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Please use the snort.conf that comes in the VRT rules 
> > > > > > > > > tarball.  The VRT maintains the snort.conf through the 
> > > > > > > > > lifecycle of the product, whereas the snort.conf in the etc/ 
> > > > > > > > > directory of the tarball is a snapshot of the 
> snort.conf when 
> > > > > > > > > Snort is built for release.
> > > > > > > > >
> > > > > > > > > J
> > > > > > > > >
> > > > > > > > > On Dec 6, 2011, at 11:10 AM, Weir, Jason wrote:
> > > > > > > > >
> > > > > > > > > > Just downloaded the latest tarball - seesm the 2.9.1.2 
> > > > > > > version has a
> > > > > > > > > > snort.conf that says it's only compatable with snort 2.9.1.1
> > > > > > > > > >
> > > > > > > > > > Is there a new snort.conf for 2.9.1.2??


_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
------------------------------------------------------------------------------
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!