[Snort-users] Latest snort.conf

Joel Esler jesler at ...1935...
Tue Dec 6 16:26:30 EST 2011


http://blog.snort.org/2011/12/vrt-snortconf-example-files.html

Joel

On Dec 6, 2011, at 1:58 PM, Weir, Jason wrote:

> TY!!
> 
>> -----Original Message-----
>> From: Joel Esler [mailto:jesler at ...1935...] 
>> Sent: Tuesday, December 06, 2011 1:56 PM
>> To: Weir, Jason
>> Cc: snort-users at lists.sourceforge.net
>> Subject: Re: [Snort-users] Latest snort.conf
>> 
>> 
>> Keep your eye on the Snort.org blog (http://blog.snort.org)  
>> I'll post it there.
>> 
>> 
>> On Dec 6, 2011, at 1:22 PM, Weir, Jason wrote:
>> 
>>> Perfect - thanks...  Let us know where it will be...
>>> 
>>> -J
>>> 
>>>> -----Original Message-----
>>>> From: Joel Esler [mailto:jesler at ...1935...] 
>>>> Sent: Tuesday, December 06, 2011 12:46 PM
>>>> To: Weir, Jason
>>>> Cc: snort-users at lists.sourceforge.net
>>>> Subject: Re: [Snort-users] Latest snort.conf
>>>> 
>>>> 
>>>> I can do that.  I'll put it up on snort.org.
>>>> 
>>>> However, the snort.conf that is distributed with the 
>>>> registered user release for that version is appropriate to 
>>>> that release.  
>>>> 
>>>> Joel
>>>> 
>>>> On Dec 6, 2011, at 12:34 PM, Weir, Jason wrote:
>>>> 
>>>>> OK Joel - round 2..
>>>>> 
>>>>> I'm documenting the snort install\config - I need the 
>>>> latest snort.conf
>>>>> long before I get to needing any rules and... 
>>>>> 
>>>>> What if I'm not a subscriber\registered user and don't plan 
>>>> on using the
>>>>> VRT ruleset any way I can get the latest snort.conf?
>>>>> 
>>>>> Seems an odd place to maintain the snort conf file as 
>> it's not rule
>>>>> specific...  Any chance of you guys providing a the latest 
>>>> snort.conf or
>>>>> a patch file somewhere other than the ruleset?
>>>>> 
>>>>> Thanks,
>>>>> Jason
>>>>> 
>>>>>> -----Original Message-----
>>>>>> From: Joel Esler [mailto:jesler at ...1935...] 
>>>>>> Sent: Tuesday, December 06, 2011 11:52 AM
>>>>>> To: Weir, Jason
>>>>>> Cc: snort-users at lists.sourceforge.net
>>>>>> Subject: Re: [Snort-users] Latest snort.conf
>>>>>> 
>>>>>> 
>>>>>> No problem.  It's good for people to have a refresher every 
>>>>>> now and again.
>>>>>> 
>>>>>> J
>>>>>> 
>>>>>> On Dec 6, 2011, at 11:39 AM, Weir, Jason wrote:
>>>>>> 
>>>>>>> Thanks Joel for the re-enforcing what I already knew...  
>>>>>> I'm going back
>>>>>>> through and redocumenting the install (quite a few upgraded 
>>>>>> packages)
>>>>>>> and forgot that's where you keep the latest conf file..
>>>>>>> 
>>>>>>> Hopefully won't have to ask again..
>>>>>>> 
>>>>>>> -J
>>>>>>> 
>>>>>>>> -----Original Message-----
>>>>>>>> From: Joel Esler [mailto:jesler at ...1935...] 
>>>>>>>> Sent: Tuesday, December 06, 2011 11:35 AM
>>>>>>>> To: Weir, Jason
>>>>>>>> Cc: snort-users at lists.sourceforge.net Users
>>>>>>>> Subject: Re: [Snort-users] Latest snort.conf
>>>>>>>> 
>>>>>>>> 
>>>>>>>> Please use the snort.conf that comes in the VRT rules 
>>>>>>>> tarball.  The VRT maintains the snort.conf through the 
>>>>>>>> lifecycle of the product, whereas the snort.conf in the etc/ 
>>>>>>>> directory of the tarball is a snapshot of the snort.conf when 
>>>>>>>> Snort is built for release.
>>>>>>>> 
>>>>>>>> J
>>>>>>>> 
>>>>>>>> On Dec 6, 2011, at 11:10 AM, Weir, Jason wrote:
>>>>>>>> 
>>>>>>>>> Just downloaded the latest tarball - seesm the 2.9.1.2 
>>>>>> version has a
>>>>>>>>> snort.conf that says it's only compatable with snort 2.9.1.1
>>>>>>>>> 
>>>>>>>>> Is there a new snort.conf for 2.9.1.2??
> 
> 
> _____________________________________________________________________________________________
> 
> Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.





More information about the Snort-users mailing list