[Snort-sigs] Whitehats rules versus Snort.org rules

Brian bmc at ...95...
Thu Oct 2 06:30:27 EDT 2003


On Thu, Oct 02, 2003 at 12:15:37PM +0300, Jukka Juslin wrote:
> The new a lot advertized "Snort 2.0 Intrusion Detection" book mentions
> Whitehat rules a couple of times (for example on page 359). However, when
> I tried to check those out at whitehats.org doesn't seems to exist anymore
> - instead its whitehats.com (the URL given in the book was
> www.whitehats.org/ids/vision18.tar.gz).

Thats a bug in the book.  Thanks for pointing it out.

Frankly, whitehats.com is drasticly out of date.  Max is alive and
well, but he hasn't published updated rulesets for a VERY long time.

-brian




More information about the Snort-sigs mailing list