RE: [Snort-devel] [Snort-users] portscan2-ignoreports...anyone get it to work???

From: Erek Adams <erek(at)snort.org>
Date: Mon Mar 24 2003 - 11:57:08 EST

On Mon, 24 Mar 2003, Jeff Oliveto wrote:

> It would be "nice" if someone would update the snort.conf for the
> portscan2 preprocessor. This guessing and hunting the newsgroups for
> information on how to configure the preprocessor is a waste of time.

Agreed. It does NEED to be in the docs. This was something added in during the last update, and wasn't listed as a 'production' feature. snort.conf doesn't get updated until things are 'production' status. Many users are on the CVS commits list and keep up with the new additions to the code. Those folks may use/run untested/undocumented features... They may not. It's all up to you.

But for the best docs... The manual covers everything production in 1.9.1. The FAQ covers quite a few common questions. For the rest, I'd suggest the code and/or mailing list.

And as for 'guessing and hunting'.... You missed the message [0] about this _very_ topic that was sent over two days ago. As I've said before, check this [1] before getting frustrated. And remember, it's good for the Karma.

Cheers!

---

Erek Adams

   "When things get weird, the weird turn pro." H.S. Thompson

[0]	
http://marc.theaimsgroup.com/?l=snort-users&m=104836289325671&w=2
[1]	
http://marc.theaimsgroup.com/?l=snort-users&m=104230179003344&w=2


-------------------------------------------------------

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users Received on Mon Mar 24 13:29:55 2003