[Snort-sigs] snortrules-current not updated since 22 - July
andreaso at ...58...
Tue Aug 6 07:47:01 EDT 2002
On 6 Aug 2002, Russell Fulton wrote:
> Is the auto update of the snort rules running correctly? So far as I
> can tell the snortrules-current.tar.gz.md5 has not changed since at
> least 22 of July.
Are you sure you mean snortrules-current.tar.gz and not
snortrules.tar.gz? snortrules-current.tar.gz is updated frequently.
Last time was just a few hours ago:
$ grep \$Id *.rules | grep 2002\/08
experimental.rules:# $Id: experimental.rules,v 1.55 2002/08/05 19:41:29 cazz Exp $
ftp.rules:# $Id: ftp.rules,v 1.29 2002/08/05 19:41:31 cazz Exp $
policy.rules:# $Id: policy.rules,v 1.23 2002/08/05 19:41:34 cazz Exp $
web-cgi.rules:# $Id: web-cgi.rules,v 1.54 2002/08/05 19:41:35 cazz Exp $
web-iis.rules:# $Id: web-iis.rules,v 1.50 2002/08/05 19:41:37 cazz Exp $
web-misc.rules:# $Id: web-misc.rules,v 1.89 2002/08/05 19:41:39 cazz Exp $
And all the checksums in snortrules-current.tar.gz.md5 are ok.
snortrules.tar.gz is not updated as frequently anymore though, which I
understand since the 1.9+ rules are superior (gotta love the "flow"
keyword for example) and Snort 1.9 probably isn't too far away now.
More information about the Snort-sigs