[Snort-openappid] OppenAppID and Shared Object Rules

Sec_Aficionado secaficionado at ...8...
Sat Nov 1 17:35:08 EDT 2014


Hello,

In the snort blog entry titled "Firing up  OpenAppID", the author recommends  disabling the SO rules. There wasn't a 2.9.7.0 specific rule at the time "so it's easier to skip this for now", he said.

Is that still the case?

Are there any special considerations?

Thanks in advance.

SecAficionado



More information about the Snort-openappid mailing list