Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Snort-sigs] [Snort-users] Flowbit dependancy issue |
|---|---|
| Date: | Mon, 05 Feb 2007 11:00:07 -0500 |
The awesomeness of Sourceforge! J On 2/5/07 10:51 AM, "Matt Jonkman" <jonkman@bleedingthreats.net> mentioned to me:
I sent that email about a month ago. 1/8/07. Not sure why it just surfaced.... Thanks Matt MAtt Matthew Watchinski wrote:Unless something broke recently I had fixed packages hand rolled into the "registered" user release about a month ago. Matt Jonkman wrote:Don't know how to whistle here... or I would. :) If fixes do show up, or maybe even just a 'what happened' so we can fix it ourselves, will this be on the 30 day delay? Or whatever the license is now? Matt Bamm Visscher wrote:*crickets* ?? On 1/4/07, Bamm Visscher <bamm.visscher@gmail.com> wrote:Can you define "shortly". The problem was reported out of band well before Matt brought it up on list. Are there any work arounds? Can I just s/dce.isystemactivator.bind/dce.bind.ISystemActivator/g as it looks like there was a major renaming of flowbits that may have caused the issue. Do I need to do a work around or do the new rules associated with dce.bind.ISystemActivator give me the same coverage? Bammkkkk On 12/21/06, Matthew Watchinski <mwatchinski@sourcefire.com> wrote:Clean ups for this warning will be out shortly. Cheers, -matt Matt Jonkman wrote:Using the new version of oinkmaster that's doing more detailedflowbitdependancy checking: WARNING: SID 3431 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3436 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3428 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3435 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3425 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3433 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3430 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3439 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3429 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3427 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3437 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3434 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3440 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3426 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3432 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule WARNING: SID 3438 depends on flowbit "dce.isystemactivator.bind"whichis not set in any rule I can't find the sig that's supposed to set that. That kills somegoodrules. Anyone know where it went? Matt-------------------------------------------------------------------------Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance toshare youropinions on IT & business topics through brief surveys - and earn cashhttp://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV_______________________________________________ Snort-sigs mailing list Snort-sigs@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/snort-sigs-- sguil - The Analyst Console for NSM http://sguil.sf.net------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier. Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Snort-sigs mailing list Snort-sigs@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/snort-sigs
+---------------------------------------------------------------------+
joel esler Sourcefire 1-706-627-2101
gpg key: http://demo.sourcefire.com/jesler.pgp.key
"Steve Jobs invented the world...²
Bill Gates, 2007
+---------------------------------------------------------------------+
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: [Snort-users] [Snort-sigs] Flowbit dependancy issue, Matt Jonkman |
|---|---|
| Next by Date: | [Snort-sigs] Bleeding Edge Threats Daily Signature Changes, bleeding |
| Previous by Thread: | Re: [Snort-users] [Snort-sigs] Flowbit dependancy issue, Matt Jonkman |
| Next by Thread: | [Snort-sigs] These fields are very useful if a SOAP message is routed through intermediaries on its way to the ultimate destination., gyp |
| Indexes: | [Date] [Thread] [Top] [All Lists] |