Snort mailing list archives
snort.conf differences in Snort 2.9.8.2
From: Y M <snort () outlook com>
Date: Fri, 8 Apr 2016 07:30:20 +0000
Hello all, snort.conf in the Snort 2.9.8.2 tarball is not in sync with the snort.conf at https://www.snort.org/documents/snort-2982-conf. Of importance, the differences involve ports definitions, rules inclusion, and preprocessor configurations. The major differences are posted below. Which conf file to go by? 1. snort.conf in snort-2.9.8.2.tar.gz contains the legacy dynamic libraries only. It does not include the new ones as defined in this blog post: http://blog.snort.org/2014/08/snort-subscriber-ruleset-re.html.<http://blog.snort.org/2014/08/snort-subscriber-ruleset-re.html> 2. HTTP_PORTS 3. normalize_tcp options 4. stream5_tcp options and ports 5. http_inspect_server ports 6. ssl preprocessor ports 7. rules files inclusion. YM
------------------------------------------------------------------------------
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- snort.conf differences in Snort 2.9.8.2 Y M (Apr 08)
- Re: snort.conf differences in Snort 2.9.8.2 Joel Esler (jesler) (Apr 08)
- Re: snort.conf differences in Snort 2.9.8.2 Y M (Apr 08)
- Re: snort.conf differences in Snort 2.9.8.2 Joel Esler (jesler) (Apr 08)