On Tue, Nov 24, 2009 at 10:23 AM, Markus Lude <markus.l...@gmx.de> wrote:
> On Sun, Oct 25, 2009 at 05:36:50PM +0100, Markus Lude wrote:
>> Hello,
>> here is an update to latest snort version 2.8.5.1. I enabled support for
>> IPv6. Beside that I removed the example libraries. I think, one don't
>> really need them.
>>
>> You now need to add the correct library version number to
>> libsf_engine.so in the dynamicengine config line in your snort.conf.
>> This applies only to those which use an older already adjusted
>> snort.conf. The one in the diff below already has it. Should I add a
>> MESSAGE file for this?
>>
>> Please test and report which flavor/arch/output_plugin you use/tested.
>> Thanks.
>
> Did anyone had a look at this?

Patch works OK for me in testing on i386 using the mysql flavor. I can
only test IPv6 with link local (I'm glad v6 is now enabled by
default). I have reservations about 2.8.5 and have not had time to
research it for production use. I think it does away with
threshold.conf and we'll need time to research and test that before
deploying. Perhaps next semester I'll have more time to experiment
with it. Anyway, this patch built and worked fine for me.

Hope this helps,

Brad

Reply via email to