[Snort-openappid] OppenAppID and Shared Object Rules

Y M snort at ...46...
Sat Nov 1 17:44:11 EDT 2014

That was before the official release of snort The .so rules now ship with the rules tarball and should work as usual.


Sent from Mobile
From: Sec_Aficionado<mailto:secaficionado at ...8...>
Sent: ‎11/‎2/‎2014 12:35 AM
To: Snort-openappid at lists.sourceforge.net<mailto:Snort-openappid at ...11...ceforge.net>
Subject: [Snort-openappid] OppenAppID and Shared Object Rules


In the snort blog entry titled "Firing up  OpenAppID", the author recommends  disabling the SO rules. There wasn't a specific rule at the time "so it's easier to skip this for now", he said.

Is that still the case?

Are there any special considerations?

Thanks in advance.

Snort-openappid mailing list
Snort-openappid at lists.sourceforge.net

Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-openappid/attachments/20141102/74a70eda/attachment.html>

More information about the Snort-openappid mailing list