[Snort-sigs] More poorly performing GID 3 rules....

Guise McAllaster guise.mcallaster at ...2420...
Wed Feb 3 13:10:28 EST 2010


Thanks Matt/JJ/Patrick for the quick responses ... clearly I have much
to learn about snort and what is open and closed.

Guise

On 2/3/10, Matt Olney <molney at ...435...> wrote:
> Short answer:  MS isn't the only entitiy where we are under
> contractual obligations.  I'll put in bugs to have these reviewed.
>
> Busy Matt
>
> On Wed, Feb 3, 2010 at 12:49 PM, Guise McAllaster
> <guise.mcallaster at ...2420...> wrote:
>> More poorly performing GID 3 rules that I cannot understand without
>> reversing because they are compiled and the source is not released.
>>
>> 7019 - P2P WinNY connection attempt
>> 8351 - BAD-TRAFFIC PGM nak list overflow attempt
>>
>> Srsly, is there any good reason these are protected by closed source?
>> Maybe I can understand 8351 if it is part of your deal with MS but
>> WinNY???  And don't get me started on the SMB hogs....
>>
>> Guise
>>
>> ------------------------------------------------------------------------------
>> The Planet: dedicated and managed hosting, cloud storage, colocation
>> Stay online with enterprise data centers and the best network in the
>> business
>> Choose flexible plans and management services without long-term contracts
>> Personal 24x7 support from experience hosting pros just a phone call away.
>> http://p.sf.net/sfu/theplanet-com
>> _______________________________________________
>> Snort-sigs mailing list
>> Snort-sigs at lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/snort-sigs
>>
>




More information about the Snort-sigs mailing list