[Emerging-Sigs] ZeuS CnC Check In's Sig
l0rdch0de1m0rt at gmail.com
Tue Oct 19 10:43:29 EDT 2010
On 10/19/10, Joel Esler <joel.esler at me.com> wrote:
> We never put the old versions of Snort back up on the website after the
> redesign, I don't know if (or when) we'll put that stuff back up, and I'm
> not exactly sure where we store it.
> But I have some old snort manuals in my repository if you need them. What
> version do you need?
> On Oct 19, 2010, at 10:23 AM, L0rd Ch0de1m0rt wrote:
>> Hello. This reminds me. Is there a place where we can access "old"
>> snort manuals? With such non-trivial changes between versions (even
>> "supported" versions like 188.8.131.52 vs. 2.9), you have to know and use
>> the right behaviour. Plus, many people use much older snort versions
>> for a variety of reasons (e.g. 2.4) so having those manuals (and
>> source code) is very helpful.
>> -L0rd Ch0de1m0rt
>> On Mon, Oct 18, 2010 at 6:57 PM, Joel Esler <joel.esler at me.com> wrote:
>>> On Oct 18, 2010, at 5:31 PM, Will Metcalf wrote:
>>>> haha! So the behavior changes from 184.108.40.206 to 2.9.0... In 220.127.116.11
>>>> distance/within is treated like depth/offset from the beginning of the
>>>> normalized buffer. In 2.9.0 relative matches work. /me runs off to
>>>> update spreadsheet. Hows that content/modifier interaction
>>>> documentation coming along Joel? ;-)...
>>> Yes, we have been making changes to the documentation recently, we're
>>> continuing to update it on an on-going basis. If you guys have specific
>>> changes that need to be made, please make sure and send them to me so I
>>> can file them in our bug system.
>>> Joel Esler
>>> Emerging-sigs mailing list
>>> Emerging-sigs at emergingthreats.net
>>> Support Emerging Threats! Get your ET Stuff! Tshirts, Coffee Mugs and
>> Emerging-sigs mailing list
>> Emerging-sigs at emergingthreats.net
>> Support Emerging Threats! Get your ET Stuff! Tshirts, Coffee Mugs and
> Joel Esler
More information about the Emerging-sigs