<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">That’s correct.<div><div><div><br>On Nov 29, 2017, at 19:50, Leonard Jacobs <<a href="mailto:ljacobs@netsecuris.com">ljacobs@netsecuris.com</a>> wrote:<br><br></div><blockquote type="cite"><div>So just to be clear. If running Suricata 4.0.1 then it is best to use the 4.x set?<br><br><br><div><strong>
From:
</strong>
Francis Trudeau <<a href="mailto:ftrudeau@emergingthreats.net">ftrudeau@emergingthreats.net</a>>
<br>
<strong>
To:
</strong>
Leonard Jacobs <<a href="mailto:ljacobs@netsecuris.com">ljacobs@netsecuris.com</a>>
<br>
<strong>
Cc:
</strong>
Jason Williams <<a href="mailto:jwilliams@emergingthreats.net">jwilliams@emergingthreats.net</a>>, "<a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@openinfosecfoundation.org</a>" <<a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@openinfosecfoundation.org</a>>, Alan Amesbury <<a href="mailto:amesbury@oitsec.umn.edu">amesbury@oitsec.umn.edu</a>>
<br>
<strong>
Sent:
</strong>
11/29/2017 6:24 PM
<br>
<strong>
Subject:
</strong>
Re: [Oisf-users] Suricata 4.0 rule fork
<br><br><blockquote class="mori" style="margin:0 0 0 .8ex;border-left:1px solid #CCC;padding-left:1ex;">>
<br>> Each set covers versions above it. 2.x set will run in anything above 2.0. If running 4.0, that set will work, but you'll be missing out on the new features we're targeting.
<br>
<br>"That set" was referencing the sentence prior, talking about 2.x set.
<br>I should have been more clear:
<br>
<br>> Each set covers versions above it. 2.x set will run in anything above 2.0. If running 4.0, the 2.x set will work, but you'll be missing out on the new 4.0 features we're using in the 4.x set.
<br>
<br>FT
<br></blockquote></div></div></blockquote></div></div></body></html>