|
|
Choosing A Webhost: |
Error With Flowbit dce.bind.netware_cs: msg#00115security.ids.snort.bleedingsnort
The latest registered users rule pack (snortrules-snapshot-CURRENT.tar.gz), released 2006-12-15, appears to contain an error. Sid 4583 that sets the flowbit: dce.bind.netware_cs has been disabled (commented out) while a number of rules that are dependant on the flowbit remain enabled by default. Is there a reason why sid 4583 is no longer on by default? If the signature is no longer needed, then the other rules with the dce.bind.netware_cs dependancy should be disabled by default too. It is my understanding the only negative effect this error will cause is a slightly slow initial load time of snort and some unrequired memory use. This of course assumes that those rules are meant to be depreciated. Bammkkkk -- sguil - The Analyst Console for NSM http://sguil.sf.net
Bleeding-sigs mailing list Bleeding-sigs-WwB1pFISwSkm7effSn6vN9HuzzzSOjJt@xxxxxxxxxxxxxxxx http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-sigs
|
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| Previous by Date: | Re: definition, Bamm Visscher |
|---|---|
| Next by Date: | Re: Error With Flowbit dce.bind.netware_cs, Bamm Visscher |
| Previous by Thread: | New Socks Proxy sigs — For bots, Matt Jonkman |
| Next by Thread: | Re: Error With Flowbit dce.bind.netware_cs, Bamm Visscher |
| Indexes: | [Date] [Thread] [Top] [All Lists] |
Free MagazinesCisco NewsReceive a free quarterly e-newsletter with exclusive articles on how Cisco IT uses its own products and solutions to enable the business. subscribe Systems Management News, the newspaper for IT systems administration and data center managers! Each issue of Systems Management News is chock-full of news and analysis to help you understand what's happening in your field. subscribe The Enterprise Newsweekly eWeek is the essential technology information source for builders of e-business. subscribe Oracle Magazine Oracle Magazine contains technology strategy articles, sample code, tips, Oracle and partner news, how to articles for developers and DBAs, and more. Oracle (NASDAQ: ORCL) is the world's largest enterprise software company. subscribe Total Telecom Total Telecom is "The Economist of the communications industry". subscribe |