Re: Snort.conf updates have been posted

[Joel Esler <jesler () sourcefire com>]

1. This is for all currently shipping versions.  I updated all the snort.confs at the link below.
2.  I'm unaware if ET has coverage for the vulnerabilities that we require for that port.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire

On Oct 10, 2012, at 2:55 AM, Amm Snort <ammdispose-snort () yahoo com> wrote:

> Just a minor query.
> 1) Is this applicable just for new beta version or it works for 2.9.3.1 too?
> 2) Will this work if I am using ET rules?
>
> Thanks and regards,
>
> Amm.
>
> From: Joel Esler <jesler () sourcefire com>
> To: "snort-users () lists sourceforge net list" <snort-users () lists sourceforge net>; snort-sigs <snort-sigs () 
> lists sourceforge net> 
> Sent: Wednesday, 10 October 2012 1:16 AM
> Subject: [Snort-users] Snort.conf updates have been posted
>
> http://blog.snort.org/2012/10/sourcefire-vrt-certified-snort-rules_9.html
>
> The following changes were made to the snort.conf:
>
> portvar HTTP_PORTS 
> [80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9080,9090,9091,9443,9999,11371,55555]
>  
>
> now reads:
>
> portvar HTTP_PORTS 
> [80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9060,9080,9090,9091,9443,9999,11371,55555]
>  
>
> (Addition of 9060)

------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!