Snort mailing list archives

inconsistency docu vs. snort.conf


From: Felix Erlacher <felix.erlacher () uibk ac at>
Date: Wed, 25 Jan 2017 12:18:35 +0100

Hi all,

I think I just found an inconsistency between the official documentation
and the example snort.conf file.
In the current documentation for Snort 2.9.9 (dated November 14)
available on the snort.org webpage it says on page 46 for the
preprocessor stream5_tcp option "require_3whs" --> "the default is set
to off" and for the session grace period of that option "The default is
”0”".
But in the sample snort.conf file in the snort 2.9.9.0 tarball as well
as the one on the webpage (https://www.snort.org/configurations) the
require_3whs option is enabled and the grace period set to 180 seconds.

The same holds for the "detect_anomalies" option, docu says default is
off, in example snort.conf it is turned on.

greetings

-- 
Felix Erlacher



Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: