This is a discussion on Re: [Snort-users] Snort 2.3.3 available within the Snort forums, part of the System Security and Security Related category; I think the new preprocessor should be disabled by default otherwise if you use a snort.conf 2.3.3 ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
I think the new preprocessor should be disabled by default otherwise if
you use a snort.conf 2.3.3 with a snort < 2.3.3 your snort won't start (it can be tricky...). -- Eric Maheo Vice President of Engineering, Applied Watch Technologies, LLC 1134 N. Main St. Algonquin, IL 60102 Tel: (877) 262-7593 x324 Fax: (877) 262-7593 Email: eric.maheo@appliedwatch.com Web: http://www.appliedwatch.com > Good evening, Snorters! > > Snort v2.3.3 has been officially released. This release covers two > points, listed below: > > * Issues with suppressing sfPortscan Open Ports have been fixed. > > * Added a new mini-preprocessor to catch the X-Link2State > vulnerability. This preprocessor can be configured to drop the > offending connection when in Inline-mode. Please read snort.conf or > the snort manual for more details. This preprocessor is enabled by > default in snort.conf. > > Snort tarballs and RPMS can be found at http://www.snort.org/dl/; > Win32 distribution is not yet available, however we hope to have it up > shortly. > > Thanks, and do have a great weekend! > The Snort Team > > > ------------------------------------------------------- > SF email is sponsored by - The IT Product Guide > Read honest & candid reviews on hundreds of IT Products from real users. > Discover which products truly live up to the hype. Start reading now. > http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click > _______________________________________________ > Snort-users mailing list > Snort-users@lists.sourceforge.net > Go to this URL to change user options or unsubscribe: > https://lists.sourceforge.net/lists/...fo/snort-users > Snort-users list archive: > http://www.geocrawler.com/redir-sf.p...st=snort-users ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |