pfSense Gold Subscription

Author Topic: Thank you ermal and co.!  (Read 1203 times)

0 Members and 1 Guest are viewing this topic.

Offline SectorNine50

  • Jr. Member
  • **
  • Posts: 33
  • Karma: +0/-0
    • View Profile
Thank you ermal and co.!
« on: July 22, 2012, 06:19:23 pm »
Just got the snort package 2.5.1 up and running without a hitch!  Thank you so much for all your hard work, it seems to be running better than ever (RAM usage is way down)!  I felt so naked without my Snort! :)

Offline miles267

  • Full Member
  • ***
  • Posts: 240
  • Karma: +0/-0
    • View Profile
Re: Thank you ermal and co.!
« Reply #1 on: July 22, 2012, 07:48:17 pm »
I second this and plan to donate.  Thanks Ermal.  Now if only you can come up with an improved Traffic Shaping wizard ;-)

Offline chowtamah

  • Jr. Member
  • **
  • Posts: 54
  • Karma: +0/-0
    • View Profile
    • my Information
Re: Thank you ermal and co.!
« Reply #2 on: July 23, 2012, 11:29:08 am »
Thanks ermal, cino and Fesoj.
2.0.2-RELEASE (amd64)
built on Fri Dec 7 22:39:43 EST 2012

Always trying to learn!!

Offline johnnybe

  • Hero Member
  • *****
  • Posts: 1395
  • Karma: +0/-0
  • I've got... a head with wings
    • View Profile
    • nextsense blog
Re: Thank you ermal and co.!
« Reply #3 on: July 23, 2012, 02:41:24 pm »
Second that. What they said!  8)
you would not believe the view up here

Offline caustic386

  • Jr. Member
  • **
  • Posts: 47
  • Karma: +0/-0
    • View Profile
Re: Thank you ermal and co.!
« Reply #4 on: July 23, 2012, 04:22:32 pm »
Same here - love the new rule category layout!  Are shared objects still a no-go for 64 bit?

Already bought a support sub.

Online ermal

  • Administrator
  • Hero Member
  • *****
  • Posts: 3363
  • Karma: +0/-0
    • View Profile
Re: Thank you ermal and co.!
« Reply #5 on: July 23, 2012, 05:30:21 pm »
No they are supported afaik.

There are some tweaks to be done related to detecting that a .so has changed and stop/start snort rather than reload.
But will do that soon.

Offline judex

  • Jr. Member
  • **
  • Posts: 62
  • Karma: +0/-0
    • View Profile
Re: Thank you ermal and co.!
« Reply #6 on: July 24, 2012, 04:45:53 am »
The SO rules work in my 2.5.1 - 2.0.1 amd64 installation.

Are the SO rules expected to replace or to complement the related non SO rules with the same name?
2.1-RELEASE (amd64)
built on Wed Sep 11 18:17:48 EDT 2013
FreeBSD 8.3-RELEASE-p11

Offline Fesoj

  • Full Member
  • ***
  • Posts: 207
  • Karma: +0/-0
    • View Profile
Re: Thank you ermal and co.!
« Reply #7 on: July 24, 2012, 10:15:09 am »
The shared object rules seem add additional functionality. E.g. the snort_p2p rules are (now) empty, but the associated so rule has support for detecting the WinNY program. When you download the rules, there is a source folder---so you could actually look at the content of the so rules.