[Snort-users] Latest snort.conf

Joel Esler jesler at ...1935...
Tue Dec 6 13:56:13 EST 2011


Keep your eye on the Snort.org blog (http://blog.snort.org)  I'll post it there.


On Dec 6, 2011, at 1:22 PM, Weir, Jason wrote:

> Perfect - thanks...  Let us know where it will be...
> 
> -J
> 
>> -----Original Message-----
>> From: Joel Esler [mailto:jesler at ...1935...] 
>> Sent: Tuesday, December 06, 2011 12:46 PM
>> To: Weir, Jason
>> Cc: snort-users at lists.sourceforge.net
>> Subject: Re: [Snort-users] Latest snort.conf
>> 
>> 
>> I can do that.  I'll put it up on snort.org.
>> 
>> However, the snort.conf that is distributed with the 
>> registered user release for that version is appropriate to 
>> that release.  
>> 
>> Joel
>> 
>> On Dec 6, 2011, at 12:34 PM, Weir, Jason wrote:
>> 
>>> OK Joel - round 2..
>>> 
>>> I'm documenting the snort install\config - I need the 
>> latest snort.conf
>>> long before I get to needing any rules and... 
>>> 
>>> What if I'm not a subscriber\registered user and don't plan 
>> on using the
>>> VRT ruleset any way I can get the latest snort.conf?
>>> 
>>> Seems an odd place to maintain the snort conf file as it's not rule
>>> specific...  Any chance of you guys providing a the latest 
>> snort.conf or
>>> a patch file somewhere other than the ruleset?
>>> 
>>> Thanks,
>>> Jason
>>> 
>>>> -----Original Message-----
>>>> From: Joel Esler [mailto:jesler at ...1935...] 
>>>> Sent: Tuesday, December 06, 2011 11:52 AM
>>>> To: Weir, Jason
>>>> Cc: snort-users at lists.sourceforge.net
>>>> Subject: Re: [Snort-users] Latest snort.conf
>>>> 
>>>> 
>>>> No problem.  It's good for people to have a refresher every 
>>>> now and again.
>>>> 
>>>> J
>>>> 
>>>> On Dec 6, 2011, at 11:39 AM, Weir, Jason wrote:
>>>> 
>>>>> Thanks Joel for the re-enforcing what I already knew...  
>>>> I'm going back
>>>>> through and redocumenting the install (quite a few upgraded 
>>>> packages)
>>>>> and forgot that's where you keep the latest conf file..
>>>>> 
>>>>> Hopefully won't have to ask again..
>>>>> 
>>>>> -J
>>>>> 
>>>>>> -----Original Message-----
>>>>>> From: Joel Esler [mailto:jesler at ...1935...] 
>>>>>> Sent: Tuesday, December 06, 2011 11:35 AM
>>>>>> To: Weir, Jason
>>>>>> Cc: snort-users at lists.sourceforge.net Users
>>>>>> Subject: Re: [Snort-users] Latest snort.conf
>>>>>> 
>>>>>> 
>>>>>> Please use the snort.conf that comes in the VRT rules 
>>>>>> tarball.  The VRT maintains the snort.conf through the 
>>>>>> lifecycle of the product, whereas the snort.conf in the etc/ 
>>>>>> directory of the tarball is a snapshot of the snort.conf when 
>>>>>> Snort is built for release.
>>>>>> 
>>>>>> J
>>>>>> 
>>>>>> On Dec 6, 2011, at 11:10 AM, Weir, Jason wrote:
>>>>>> 
>>>>>>> Just downloaded the latest tarball - seesm the 2.9.1.2 
>>>> version has a
>>>>>>> snort.conf that says it's only compatable with snort 2.9.1.1
>>>>>>> 
>>>>>>> Is there a new snort.conf for 2.9.1.2??
> 
> 
> _____________________________________________________________________________________________
> 
> Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.





More information about the Snort-users mailing list