Re: Sourcefire VRT Certified Snort Rules Update2011-12-07

[Michael Scheidell <michael.scheidell () secnap com>]

Sure, but if I add the snort.conf file that is rules, overwritting my edited snort.conf file...

It would be worst.

Blog says they would use that var in a specific rule set.

They didn't.

They broke things.


From: Weir, Jason [mailto:jason.weir () nhrs org]
Sent: Thursday, December 08, 2011 8:27 AM
To: Michael Scheidell; snort-sigs () lists sourceforge net
Subject: RE: [Snort-sigs] Sourcefire VRT Certified Snort Rules Update2011-12-07

I was thinking that as well - but I'm sure it was in the snort.conf file bundled with the rules...

-J
-----Original Message-----
From: Michael Scheidell [mailto:michael.scheidell () secnap com]<mailto:[mailto:michael.scheidell () secnap com]>
Sent: Thursday, December 08, 2011 5:11 AM
To: snort-sigs () lists sourceforge net<mailto:snort-sigs () lists sourceforge net>
Subject: Re: [Snort-sigs] Sourcefire VRT Certified Snort Rules Update2011-12-07
On 12/7/11 4:13 PM, Research wrote:

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1





Sourcefire VRT Certified Snort Rules Update



Synopsis:

This release adds and modifies rules in several categories.


you forgot to mention that you broke every snort installation that did not add FILE_DATA_PORTS to their *.conf files.

--
Michael Scheidell, CTO

_____________________________________________________________________________________________



Please visit www.nhrs.org<http://www.nhrs.org> to subscribe to NHRS email announcements and updates.

______________________________________________________________________

This email has been scanned and certified safe by SpammerTrap(r). 

For Information please see http://www.spammertrap.com/

______________________________________________________________________  

  

------------------------------------------------------------------------------
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!