Snort mailing list archives

Re: Snort.conf updates have been posted


From: waldo kitty <wkitty42 () windstream net>
Date: Wed, 10 Oct 2012 15:39:53 -0400

On 10/9/2012 15:46, Joel Esler wrote:
[...]
now reads:

portvar HTTP_PORTS
[80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9060,9080,9090,9091,9443,9999,11371,55555]

i also note that 3124, 3127, 3129, 3382, 8081, 8082, 8083, 8085, 8124, and 27997 
are not listed... i have these from previous times... don't recall the specifics 
but ISTR that they were noted as being used by some certain critters and proxies...

------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: