Snort mailing list archives

fwsam rules in chat.rules?


From: Michael Scheidell <michael.scheidell () secnap com>
Date: Fri, 28 Jan 2011 18:21:36 -0500

upgrad(ing) from 2.8.6.1. have VRT rules *2.8.6.1) and restarted snort 2.9.0.3 with the 2.8.6.1 snortconf. just for fun.

won't start, complains about fwsam rules in these rules.
yes, I can oink them out.. but was wondering: did I put those in ?;)?

I can't imagine snort VRT ruleset with a fwsam rule in it if snortsam isn't an official snort plugin. yes, I guess I can also go to snort 2.9.03 VRT rules. hopefully they don't have any fwsam rules in them.

any idea where they came from?
i oinked my oinkmaster to see if I added them. no, I didn't add fwsam options. obviously, if snort 2.9.0.3 doesn't support fwsam rules, and (now!) it defaults to exiting out instead of erroring and disabling the rule, this would need to be fixed in wherever it came from.
--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
>*| *SECNAP Network Security Corporation

   * Certified SNORT Integrator
   * 2008-9 Hot Company Award Winner, World Executive Alliance
   * Five-Star Partner Program 2009, VARBusiness
   * Best in Email Security,2010: Network Products Guide
   * King of Spam Filters, SC Magazine 2008


______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________  
------------------------------------------------------------------------------
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: