Snort mailing list archives
fwsam rules in chat.rules?
From: Michael Scheidell <michael.scheidell () secnap com>
Date: Fri, 28 Jan 2011 18:21:36 -0500
upgrad(ing) from 2.8.6.1. have VRT rules *2.8.6.1) and restarted snort 2.9.0.3 with the 2.8.6.1 snortconf. just for fun.
won't start, complains about fwsam rules in these rules. yes, I can oink them out.. but was wondering: did I put those in ?;)?I can't imagine snort VRT ruleset with a fwsam rule in it if snortsam isn't an official snort plugin. yes, I guess I can also go to snort 2.9.03 VRT rules. hopefully they don't have any fwsam rules in them.
any idea where they came from?i oinked my oinkmaster to see if I added them. no, I didn't add fwsam options. obviously, if snort 2.9.0.3 doesn't support fwsam rules, and (now!) it defaults to exiting out instead of erroring and disabling the rule, this would need to be fixed in wherever it came from.
-- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 ISN: 1259*1300 >*| *SECNAP Network Security Corporation * Certified SNORT Integrator * 2008-9 Hot Company Award Winner, World Executive Alliance * Five-Star Partner Program 2009, VARBusiness * Best in Email Security,2010: Network Products Guide * King of Spam Filters, SC Magazine 2008 ______________________________________________________________________This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
------------------------------------------------------------------------------ Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- fwsam rules in chat.rules? Michael Scheidell (Jan 28)
- Re: fwsam rules in chat.rules? Michael Scheidell (Jan 28)
