[Snort-users] Snort.conf updates have been posted

waldo kitty wkitty42 at ...14940...
Wed Oct 10 15:39:53 EDT 2012


On 10/9/2012 15:46, Joel Esler wrote:
[...]
> now reads:
>
> portvar HTTP_PORTS
> [80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9060,9080,9090,9091,9443,9999,11371,55555]

i also note that 3124, 3127, 3129, 3382, 8081, 8082, 8083, 8085, 8124, and 27997 
are not listed... i have these from previous times... don't recall the specifics 
but ISTR that they were noted as being used by some certain critters and proxies...




More information about the Snort-users mailing list