[Snort-sigs] Sourcefire VRT Certified Snort Rules Update2011-12-07

Weir, Jason jason.weir at ...3410...
Thu Dec 8 08:30:06 EST 2011


yup...  I thought it was just me not paying attention..

	-----Original Message-----
	From: Michael Scheidell [mailto:michael.scheidell at ...1331...] 
	Sent: Thursday, December 08, 2011 8:29 AM
	To: Weir, Jason; 'snort-sigs at lists.sourceforge.net'
	Subject: RE: [Snort-sigs] Sourcefire VRT Certified Snort Rules
Update2011-12-07
	
	

	Sure, but if I add the snort.conf file that is rules,
overwritting my edited snort.conf file...

	 

	It would be worst.

	 

	Blog says they would use that var in a specific rule set.

	 

	They didn't.

	 

	They broke things.

	 

	 

	From: Weir, Jason [mailto:jason.weir at ...3410...] 
	Sent: Thursday, December 08, 2011 8:27 AM
	To: Michael Scheidell; snort-sigs at lists.sourceforge.net
	Subject: RE: [Snort-sigs] Sourcefire VRT Certified Snort Rules
Update2011-12-07

	 

	I was thinking that as well - but I'm sure it was in the
snort.conf file bundled with the rules...

	 

	-J

		-----Original Message-----
		From: Michael Scheidell
[mailto:michael.scheidell at ...1331...] 
		Sent: Thursday, December 08, 2011 5:11 AM
		To: snort-sigs at lists.sourceforge.net
		Subject: Re: [Snort-sigs] Sourcefire VRT Certified Snort
Rules Update2011-12-07

		On 12/7/11 4:13 PM, Research wrote: 

		-----BEGIN PGP SIGNED MESSAGE-----
		Hash: SHA1
		 
		 
		Sourcefire VRT Certified Snort Rules Update
		 
		Synopsis:
		This release adds and modifies rules in several
categories.
		 

		you forgot to mention that you broke every snort
installation that did not add FILE_DATA_PORTS to their *.conf files.
		
		

		-- 
		Michael Scheidell, CTO

_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20111208/83092528/attachment.html>


More information about the Snort-sigs mailing list