[Snort-users] snort rules from snort.org and sourceforge
lucretia at ...2281...
Thu Jan 24 06:06:11 EST 2002
Are there any concerns with using the snort-current rules with snort (not
I cannot find any other ruleset for snort on snort.org other than the
snort-current-rules which it states may not be compatible without
snort-current (which isn't packaged for windows?).
>:> -----Original Message-----
>:> From: snort-users-admin at lists.sourceforge.net
>:> [mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Brian
>:> Sent: Wednesday, January 23, 2002 8:42 PM
>:> To: Ronneil Camara
>:> Cc: snort-users at lists.sourceforge.net
>:> Subject: Re: [Snort-users] snort rules from snort.org and sourceforge
>:> On Wed, Jan 23, 2002 at 08:57:18PM -0600, Ronneil Camara wrote:
>:> > We can download rules from snort.org. We can do cvs from sourceforge.
>:> > Which between the two is frequently updated?
>:> > Thanks.
>:> Both. the signatures from snort.org are maintained in CVS. We
>:> pull them once every $REGULARBASIS (don't remember off the top
>:> of my head.
>:> once an hour seems right, but not sure) and generate the tgz.
>:> Not very long from now we are going to be adding new features
>:> to the signatures
>:> so we will be maintaining the signatures in both CURRENT and
>:> SNORT_1_8. When
>:> that starts happening, there will be two seperate files for
>:> sigs available
>:> from snort.org
>:> When this happens, notificataion will be sent to snort-users,
>:> snort-sigs and
>:> posted to the website.
>:> Snort-users mailing list
>:> Snort-users at lists.sourceforge.net
>:> Go to this URL to change user options or unsubscribe:
>:> Snort-users list archive:
More information about the Snort-users