[Snort-users] Rule Updates / Additions Coming Today

Jim Forster jforster at ...176...
Wed Apr 4 12:24:26 EDT 2001


Actually, the one at Whitehats.com (arachNIDS) is run by Max Vision.
I do reference his database whenever I can from our set, as well as CVS #'s,
McAfee IDs, Bugtraq IDs, etc...
Max and I keep talking about getting together on our updates, but haven't
found the time to do so yet.  :)

Jim Forster
Network Administrator
RapidNet, Inc.
-----------------------------------
http://www.snort.org
----- Original Message -----
From: Roeland Weve <roeland at ...1415...>
To: <snort-users at lists.sourceforge.net>
Cc: <jforster at ...176...>
Sent: Wednesday, April 04, 2001 8:05 AM
Subject: [Snort-users] Rule Updates / Additions Coming Today


> -----------------------
> Rule Updates / Additions Coming Today - by Jim Forster @ 08:52:33
>      After some discussion, I've decided to keep the database around.
> I'll be updating the current download sets from the database from now
> on. I will also
>   standardize the download files to
> http://www.snort.org/files/snortrules.tar.gz
>
>   Individual .rule files will also be in this directory from now on.
> (For those of you auto-updating)...
>
>   I'm currently going through my 'to-do' list of rule and site changes.
> I'll post once the files have been updated, and are ready for download.
> -----------------------
>
> I don't now exactly how many databases there are. I know there is one at
> whithats.com. You are going to use that one? That'll be great...
>
> All this sounds really great, this finally means a good line in the
> rules!
>
> Roeland
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list