[Snort-sigs] snortrules-current not updated since 22 - July

Andreas Östling andreaso at ...58...
Tue Aug 6 07:47:01 EDT 2002


On 6 Aug 2002, Russell Fulton wrote:

> HI,
> 	Is the auto update of the snort rules running correctly?  So far as I
> can tell the snortrules-current.tar.gz.md5 has not changed since at
> least 22 of July.

Hello Russell,

Are you sure you mean snortrules-current.tar.gz and not
snortrules.tar.gz? snortrules-current.tar.gz is updated frequently.
Last time was just a few hours ago:

$ grep \$Id *.rules | grep 2002\/08
experimental.rules:# $Id: experimental.rules,v 1.55 2002/08/05 19:41:29 cazz Exp $
ftp.rules:# $Id: ftp.rules,v 1.29 2002/08/05 19:41:31 cazz Exp $
policy.rules:# $Id: policy.rules,v 1.23 2002/08/05 19:41:34 cazz Exp $
web-cgi.rules:# $Id: web-cgi.rules,v 1.54 2002/08/05 19:41:35 cazz Exp $
web-iis.rules:# $Id: web-iis.rules,v 1.50 2002/08/05 19:41:37 cazz Exp $
web-misc.rules:# $Id: web-misc.rules,v 1.89 2002/08/05 19:41:39 cazz Exp $

And all the checksums in snortrules-current.tar.gz.md5 are ok.

snortrules.tar.gz is not updated as frequently anymore though, which I
understand since the 1.9+ rules are superior (gotta love the "flow"
keyword for example) and Snort 1.9 probably isn't too far away now.

Regards,
Andreas Östling





More information about the Snort-sigs mailing list