[Snort-openappid] OppenAppID and Shared Object Rules

Sec_Aficionado secaficionado at ...8...
Sat Nov 1 21:20:21 EDT 2014

Great, thank you. I have been having trouble dumping the so rules in and wanted to know if having compiled snort with the extra options was a factor.

It is good to hear it isn't.

> On Nov 1, 2014, at 5:44 PM, Y M <snort at ...46...> wrote:
> That was before the official release of snort The .so rules now ship with the rules tarball and should work as usual.
> YM
> Sent from Mobile
> From: Sec_Aficionado
> Sent: ‎11/‎2/‎2014 12:35 AM
> To: Snort-openappid at lists.sourceforge.net
> Subject: [Snort-openappid] OppenAppID and Shared Object Rules
> Hello,
> In the snort blog entry titled "Firing up  OpenAppID", the author recommends  disabling the SO rules. There wasn't a specific rule at the time "so it's easier to skip this for now", he said.
> Is that still the case?
> Are there any special considerations?
> Thanks in advance.
> SecAficionado
> ------------------------------------------------------------------------------
> _______________________________________________
> Snort-openappid mailing list
> Snort-openappid at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-openappid
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-openappid/attachments/20141101/cba16863/attachment.html>

More information about the Snort-openappid mailing list