[Snort-sigs] Whitehats rules versus Snort.org rules

Jukka Juslin jtjuslin at ...1151...
Thu Oct 2 02:16:03 EDT 2003


The new a lot advertized "Snort 2.0 Intrusion Detection" book mentions
Whitehat rules a couple of times (for example on page 359). However, when
I tried to check those out at whitehats.org doesn't seems to exist anymore
- instead its whitehats.com (the URL given in the book was
www.whitehats.org/ids/vision18.tar.gz).

The question: do you think whitehats rules still bring considerable added
value? I wouldn't see any reason, why whitehats.com rules wouldn't go into
snort.org fast enough - if they are indeed good?

Thanks for opinions,
Jukka




More information about the Snort-sigs mailing list