[Snort-sigs] Signature release process

Brian bmc at ...95...
Mon Jun 7 07:20:14 EDT 2004


On Mon, Jun 07, 2004 at 12:34:10AM +0100, Lon wrote:
> Is there a document that describes how signatures are
> treated by snort.org, specifically between different
> versions of snort?

No, there isn't. 

The SNORT_2_0 branch is for all versions of 2.0

The SNORT_2_1 branch is for all versions of 2.1

The CURRENT branch is for the latest and greatest snapshot of snort.

> I noticed that there are no LSASS signatures in the 2.0 release?
> However, they are in the sid-msg.map.  Why?

Because sid-msg.map is shared across all versions of snort.  The LSASS
rules only available in CURRENT.  

Brian




More information about the Snort-sigs mailing list