[Oisf-users] Suricata 4.0 rule fork

[Jason Williams]

That’s correct.

> On Nov 29, 2017, at 19:50, Leonard Jacobs <ljacobs at netsecuris.com> wrote:
> 
> So just to be clear.  If running Suricata 4.0.1 then it is best to use the 4.x set?
> 
> 
> From: Francis Trudeau <ftrudeau at emergingthreats.net> 
> To: Leonard Jacobs <ljacobs at netsecuris.com> 
> Cc: Jason Williams <jwilliams at emergingthreats.net>, "oisf-users at openinfosecfoundation.org" <oisf-users at openinfosecfoundation.org>, Alan Amesbury <amesbury at oitsec.umn.edu> 
> Sent: 11/29/2017 6:24 PM 
> Subject: Re: [Oisf-users] Suricata 4.0 rule fork 
> 
> > 
> > Each set covers versions above it.  2.x set will run in anything above 2.0.  If running 4.0, that set will work, but you'll be missing out on the new features we're targeting. 
> 
> "That set" was referencing the sentence prior, talking about 2.x set. 
> I should have been more clear: 
> 
> > Each set covers versions above it.  2.x set will run in anything above 2.0.  If running 4.0, the 2.x set will work, but you'll be missing out on the new 4.0 features we're using in the 4.x set. 
> 
> FT 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20171129/fbc22d02/attachment-0002.html>