[Snort-sigs] getting snort so_rules for platforms not supported in tar ball

Nigel Houghton nhoughton at ...435...
Tue May 12 08:35:33 EDT 2009


On Mon, May 11, 2009 at 9:57 PM, Russell Fulton <r.fulton at ...575...> wrote:
> I have just realised that the source for the many of the most useful
> so rules is not distributed in the standard tar ball.  Given that the
> there are no binaries for the platform on which I run snort I have a
> problem :(  I have wasted a lot of time trying to figure out why snort
> was not picking up conficker C infection before I realised I was not
> running those rules because I had compiled everything from scratch.
>
> I am forced to wonder why I paid for the full distribution since I
> can't use any of the most of the more timely rules.
>
> Is there any way I can get the source to these rules so I can use them?

Source is shipped for those that can be shipped. What distribution
would you like to see added to the pre-compiled list?

-- 
Nigel Houghton
Head Mentalist
SF VRT
http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/




More information about the Snort-sigs mailing list