[Snort-users] Ideas from within

Martin Roesch roesch at ...421...
Fri Oct 6 23:30:25 EDT 2000

I've put a request into Sourceforge to have a snort-sigs list created.  As
soon as it's up, I'll let everyone know... :)

The procedure for how rules get into Snort is people post them up here, send
them to Jim Forster, send them to Max Vision, enter them manually into
arachNIDS, or all of the above.  Things posted to the list are usually grabbed
up by *someone* and make their way into Snort releases.  Personally, I don't
oversee this part of Snort very much anymore...


Keith Pachulski wrote:
> Hash: SHA1
> While speaking with Joseph Yarbrough, we both came to the conclusion
> we need a new list to post new IDS signatures to or permit the
> posting of new IDS signatures when they are developed to the snort
> list. The daily and weekly update functionality that whitehats had
> was a great help. Unfortunately that function is not there anymore
> for everyone to post new signatures. A new list for posting IDS sigs
> or posting to the current snort list seems like the next best option.
> Keith Pachulski
> Network Security Engineer
> PenTeleData Internet Services
> Phone: (800) 281-3564 ext. 277
> PGP Key: finger strmshdw at ...404...
> "A Firewall is really much like a sophisticated traffic cop; it
> detects and stops unauthorized or suspicious movement in or out of
> the network. But security is more than a Firewall; it's a process.
> You can't just put in a Firewall and think you're secure."
> Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>
> iQA/AwUBOdnwlOGTq6qVSXTQEQJUdACg8efrMellfyMQR9o1KDtmy4Tivz0AnihP
> P6/acKe1TnZUrhwAoWAf2g9V
> =K+oJ
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users

Martin Roesch
roesch at ...421...

More information about the Snort-users mailing list