Re: [Snort-users] snort and snort-rules/ET alerts
"Joel Esler (jesler)" <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <[email protected]> |
What do we need to fix? -- Sent from my iPhone > On Dec 3, 2016, at 9:28 PM, "[email protected]" <[email protected]> wrote: > >> On 12/03/2016 12:17 PM, Michael Steele wrote: >> However, anything that works will do because there are those that update >> Snort and forget to change the snort_version in the pulledpork.conf every >> time there is a version change. > > > that's why the key is to simply ask snort what version it is... even the firewall software that i support takes a short cut and writes the snort version to a data file but that doesn't take into account out-of-band updates that install newer versions... i've pointed it out numerous times over the years and while there are some other addons which do understand and follow my lead, there's nothing been done on the other side of the fence to alleviate the problem :shrug: > > > -- > NOTE: No off-list assistance is given without prior approval. > *Please keep mailing list traffic on the list* unless > private contact is specifically requested and granted. ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ Snort-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!