Snort mailing list archives

snort.conf differences in Snort 2.9.8.2


From: Y M <snort () outlook com>
Date: Fri, 8 Apr 2016 07:30:20 +0000

Hello all,


snort.conf in the Snort 2.9.8.2 tarball is not in sync with the snort.conf at 
https://www.snort.org/documents/snort-2982-conf. Of importance, the differences involve ports definitions, rules 
inclusion, and preprocessor configurations. The major differences are posted below. Which conf file to go by?


1. snort.conf in snort-2.9.8.2.tar.gz contains the legacy dynamic libraries only. It does not include the new ones as 
defined in this blog post: 
http://blog.snort.org/2014/08/snort-subscriber-ruleset-re.html.<http://blog.snort.org/2014/08/snort-subscriber-ruleset-re.html>

2. HTTP_PORTS

3. normalize_tcp options

4. stream5_tcp options and ports

5. http_inspect_server ports

6. ssl preprocessor ports

7. rules files inclusion.


YM
------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: