[Snort-users] Snort.conf updates have been posted

Matt Jonkman mjonkman at ...15020...
Wed Oct 10 09:19:37 EDT 2012


On #2: won't affect use of the ET Open or Pro rules.

Thanks for the heads up Joel!

Matt

On Wed, Oct 10, 2012 at 2:55 AM, Amm Snort <ammdispose-snort at ...131...> wrote:
> Just a minor query.
> 1) Is this applicable just for new beta version or it works for 2.9.3.1 too?
> 2) Will this work if I am using ET rules?
>
> Thanks and regards,
>
> Amm.
>
> ________________________________
> From: Joel Esler <jesler at ...1935...>
> To: "snort-users at lists.sourceforge.net list"
> <snort-users at lists.sourceforge.net>; snort-sigs
> <snort-sigs at lists.sourceforge.net>
> Sent: Wednesday, 10 October 2012 1:16 AM
> Subject: [Snort-users] Snort.conf updates have been posted
>
> http://blog.snort.org/2012/10/sourcefire-vrt-certified-snort-rules_9.html
>
> The following changes were made to the snort.conf:
>
> portvar HTTP_PORTS
> [80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9080,9090,9091,9443,9999,11371,55555]
>
> now reads:
>
> portvar HTTP_PORTS
> [80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9060,9080,9090,9091,9443,9999,11371,55555]
>
> (Addition of 9060)
>
>
> ------------------------------------------------------------------------------
> Don't let slow site performance ruin your business. Deploy New Relic APM
> Deploy New Relic app performance management and know exactly
> what is happening inside your Ruby, Python, PHP, Java, and .NET app
> Try New Relic at no cost today and get our sweet Data Nerd shirt too!
> http://p.sf.net/sfu/newrelic-dev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort
> news!



-- 

----------------------------------------------------
Matt Jonkman
Emerging Threats Pro
Open Information Security Foundation (OISF)
Phone 866-504-2523 x110
http://www.emergingthreatspro.com
http://www.openinfosecfoundation.org
----------------------------------------------------




More information about the Snort-users mailing list