[Snort-users] Latest snort.conf

Weir, Jason jason.weir at ...14916...
Tue Dec 6 16:30:28 EST 2011


That's perfect - thanks Joel - some documentation coming your way
tomorrow..

-J

> -----Original Message-----
> From: Joel Esler [mailto:jesler at ...1935...] 
> Sent: Tuesday, December 06, 2011 4:27 PM
> To: Weir, Jason
> Cc: snort-users at lists.sourceforge.net
> Subject: Re: [Snort-users] Latest snort.conf
> 
> 
> http://blog.snort.org/2011/12/vrt-snortconf-example-files.html
> 
> Joel
> 
> On Dec 6, 2011, at 1:58 PM, Weir, Jason wrote:
> 
> > TY!!
> > 
> >> -----Original Message-----
> >> From: Joel Esler [mailto:jesler at ...1935...] 
> >> Sent: Tuesday, December 06, 2011 1:56 PM
> >> To: Weir, Jason
> >> Cc: snort-users at lists.sourceforge.net
> >> Subject: Re: [Snort-users] Latest snort.conf
> >> 
> >> 
> >> Keep your eye on the Snort.org blog (http://blog.snort.org)  
> >> I'll post it there.
> >> 
> >> 
> >> On Dec 6, 2011, at 1:22 PM, Weir, Jason wrote:
> >> 
> >>> Perfect - thanks...  Let us know where it will be...
> >>> 
> >>> -J
> >>> 
> >>>> -----Original Message-----
> >>>> From: Joel Esler [mailto:jesler at ...1935...] 
> >>>> Sent: Tuesday, December 06, 2011 12:46 PM
> >>>> To: Weir, Jason
> >>>> Cc: snort-users at lists.sourceforge.net
> >>>> Subject: Re: [Snort-users] Latest snort.conf
> >>>> 
> >>>> 
> >>>> I can do that.  I'll put it up on snort.org.
> >>>> 
> >>>> However, the snort.conf that is distributed with the 
> >>>> registered user release for that version is appropriate to 
> >>>> that release.  
> >>>> 
> >>>> Joel
> >>>> 
> >>>> On Dec 6, 2011, at 12:34 PM, Weir, Jason wrote:
> >>>> 
> >>>>> OK Joel - round 2..
> >>>>> 
> >>>>> I'm documenting the snort install\config - I need the 
> >>>> latest snort.conf
> >>>>> long before I get to needing any rules and... 
> >>>>> 
> >>>>> What if I'm not a subscriber\registered user and don't plan 
> >>>> on using the
> >>>>> VRT ruleset any way I can get the latest snort.conf?
> >>>>> 
> >>>>> Seems an odd place to maintain the snort conf file as 
> >> it's not rule
> >>>>> specific...  Any chance of you guys providing a the latest 
> >>>> snort.conf or
> >>>>> a patch file somewhere other than the ruleset?
> >>>>> 
> >>>>> Thanks,
> >>>>> Jason
> >>>>> 
> >>>>>> -----Original Message-----
> >>>>>> From: Joel Esler [mailto:jesler at ...1935...] 
> >>>>>> Sent: Tuesday, December 06, 2011 11:52 AM
> >>>>>> To: Weir, Jason
> >>>>>> Cc: snort-users at lists.sourceforge.net
> >>>>>> Subject: Re: [Snort-users] Latest snort.conf
> >>>>>> 
> >>>>>> 
> >>>>>> No problem.  It's good for people to have a refresher every 
> >>>>>> now and again.
> >>>>>> 
> >>>>>> J
> >>>>>> 
> >>>>>> On Dec 6, 2011, at 11:39 AM, Weir, Jason wrote:
> >>>>>> 
> >>>>>>> Thanks Joel for the re-enforcing what I already knew...  
> >>>>>> I'm going back
> >>>>>>> through and redocumenting the install (quite a few upgraded 
> >>>>>> packages)
> >>>>>>> and forgot that's where you keep the latest conf file..
> >>>>>>> 
> >>>>>>> Hopefully won't have to ask again..
> >>>>>>> 
> >>>>>>> -J
> >>>>>>> 
> >>>>>>>> -----Original Message-----
> >>>>>>>> From: Joel Esler [mailto:jesler at ...1935...] 
> >>>>>>>> Sent: Tuesday, December 06, 2011 11:35 AM
> >>>>>>>> To: Weir, Jason
> >>>>>>>> Cc: snort-users at lists.sourceforge.net Users
> >>>>>>>> Subject: Re: [Snort-users] Latest snort.conf
> >>>>>>>> 
> >>>>>>>> 
> >>>>>>>> Please use the snort.conf that comes in the VRT rules 
> >>>>>>>> tarball.  The VRT maintains the snort.conf through the 
> >>>>>>>> lifecycle of the product, whereas the snort.conf in the etc/ 
> >>>>>>>> directory of the tarball is a snapshot of the 
> snort.conf when 
> >>>>>>>> Snort is built for release.
> >>>>>>>> 
> >>>>>>>> J
> >>>>>>>> 
> >>>>>>>> On Dec 6, 2011, at 11:10 AM, Weir, Jason wrote:
> >>>>>>>> 
> >>>>>>>>> Just downloaded the latest tarball - seesm the 2.9.1.2 
> >>>>>> version has a
> >>>>>>>>> snort.conf that says it's only compatable with snort 2.9.1.1
> >>>>>>>>> 
> >>>>>>>>> Is there a new snort.conf for 2.9.1.2??


_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.


More information about the Snort-users mailing list