[Snort-sigs] Sourcefire VRT Certified Snort Rules Update
jesler at ...435...
Wed May 5 08:31:06 EDT 2010
On Wed, May 5, 2010 at 7:54 AM, Nigel Houghton <nhoughton at ...435...>wrote:
> On Wed, May 5, 2010 at 4:37 AM, Kayvan Javid
> >> Registered Users:
> >> There are no new symlinks for registered users as the new packages
> >> won't be available to registered users for 30 days.
> > Can someone please clarify the situation for registered users.
> > When the 30day release cycle comes around, will the registered users
> > then have access to the symlinks, joining the deprecated naming
> > convention to the new style.
> > I have seen mention in all of the sans notices and snort literature that
> > the old style names will become deprecated in June. How long before the
> > symlinks are removed entirely?
> There will not be any symlinks for registered users. You will have to
> use the new names as soon as the new rule packs reach the 30 day
> The symlinks will also disappear for subscribers at the same time.
Just for clarification, when I wrote the original articles, I said this in
"*If you are NOT a Snort VRT rules subscriber* (aka, registered user, you
don't pay for it, and you get the rulepack after the "30-day free window" is
lifted) you need to make the change. So for example, if
snortrules-snapshot-CURRENT.tar.gz is in your rule download URL, you need to
update it to snortrules-snapshot-2853.tar.gz (or
snortrules-snapshot-2860.tar.gz if you update). The Symlinks will NEVER
apply to you, as the new packages won't be available to registered users for
Nigel is correct, (never said he was wrong either). The symlinks will never
appear to non-subscribers. All the registered people have to do is correct
it to the new naming format.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-sigs