[Snort-openappid] OppenAppID and Shared Object Rules

Y M snort at ...46...
Sat Nov 1 17:44:11 EDT 2014


That was before the official release of snort 2.9.7.0. The .so rules now ship with the rules tarball and should work as usual.

YM

Sent from Mobile
________________________________
From: Sec_Aficionado<mailto:secaficionado at ...8...>
Sent: ‎11/‎2/‎2014 12:35 AM
To: Snort-openappid at lists.sourceforge.net<mailto:Snort-openappid at ...11...ceforge.net>
Subject: [Snort-openappid] OppenAppID and Shared Object Rules

Hello,

In the snort blog entry titled "Firing up  OpenAppID", the author recommends  disabling the SO rules. There wasn't a 2.9.7.0 specific rule at the time "so it's easier to skip this for now", he said.

Is that still the case?

Are there any special considerations?

Thanks in advance.

SecAficionado
------------------------------------------------------------------------------
_______________________________________________
Snort-openappid mailing list
Snort-openappid at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-openappid

Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-openappid/attachments/20141102/74a70eda/attachment.html>


More information about the Snort-openappid mailing list