[Emerging-Sigs] ZeuS CnC Check In's Sig
l0rdch0de1m0rt at gmail.com
Tue Oct 19 10:23:23 EDT 2010
Hello. This reminds me. Is there a place where we can access "old"
snort manuals? With such non-trivial changes between versions (even
"supported" versions like 126.96.36.199 vs. 2.9), you have to know and use
the right behaviour. Plus, many people use much older snort versions
for a variety of reasons (e.g. 2.4) so having those manuals (and
source code) is very helpful.
On Mon, Oct 18, 2010 at 6:57 PM, Joel Esler <joel.esler at me.com> wrote:
> On Oct 18, 2010, at 5:31 PM, Will Metcalf wrote:
>> haha! So the behavior changes from 188.8.131.52 to 2.9.0... In 184.108.40.206
>> distance/within is treated like depth/offset from the beginning of the
>> normalized buffer. In 2.9.0 relative matches work. /me runs off to
>> update spreadsheet. Hows that content/modifier interaction
>> documentation coming along Joel? ;-)...
> Yes, we have been making changes to the documentation recently, we're continuing to update it on an on-going basis. If you guys have specific changes that need to be made, please make sure and send them to me so I can file them in our bug system.
> Joel Esler
> Emerging-sigs mailing list
> Emerging-sigs at emergingthreats.net
> Support Emerging Threats! Get your ET Stuff! Tshirts, Coffee Mugs and Lanyards
More information about the Emerging-sigs