[Snort-users] Deleted FTP signatures

--0-55118299-1075947572=:69189
Content-Type: text/plain; charset=us-ascii

Hello,

I noticed that there were a few FTP rules that got deleted since Snort 1.9.0. The reason for that was:

# The following ftp rules look for specific exploits, which are not needed now
# that initial protocol decoding is available.

I'd greatly appreciate it if anyone could give me some hints on what "initial protocol decoding" can handle those deleted FTP rules.

Best regards,
Yanyan.


---------------------------------
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online
--0-55118299-1075947572=:69189
Content-Type: text/html; charset=us-ascii

<DIV>Hello, </DIV>
<DIV>&nbsp;</DIV>
<DIV>I noticed that there were a few FTP rules that got deleted since Snort 1.9.0. The reason for that was:</DIV>
<DIV>&nbsp;</DIV>
<DIV># The following ftp rules look for specific exploits, which are not needed now<BR># that initial protocol decoding is available.</DIV>
<DIV>&nbsp;</DIV>
<DIV>I'd greatly appreciate it if anyone could give me some hints on what "initial protocol decoding" can handle those deleted FTP rules.</DIV>
<DIV>&nbsp;</DIV>
<DIV>Best regards,</DIV>
<DIV>Yanyan.</DIV><p><hr SIZE=1>
Do you Yahoo!?<br>
Yahoo! Finance: <a href="http://us.rd.yahoo.com/evt=22055/*http://taxes.yahoo.com/filing.html">Get your refund fast by filing online</a>
--0-55118299-1075947572=:69189--


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users