[Snort-sigs] Snort Rules Enquiry

Joel Esler (jesler) jesler at ...3865...
Tue May 26 21:25:45 EDT 2015


On May 26, 2015, at 6:58 PM, waldo kitty <wkitty42 at ...3507...<mailto:wkitty42 at ...3507...>> wrote:

On 05/26/2015 06:10 PM, Joel Esler (jesler) wrote:
icmp-info.rules should be empty.

Imp rules have transitioned to the protocol-icmp.rules category.

and just to follow up on this, the rules file(s) like these that have
transitions are being left in place for older installations so they will
continue to operate instead of falling over when the file(s) disappear...


Eventually, and maybe soon we should start thinking about this, removing the old files.  It’s been several years.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20150527/90c50699/attachment.html>


More information about the Snort-sigs mailing list