[Snort-users] Linking rules in BASE

Nigel Houghton nhoughton at ...1935...
Wed Aug 25 08:58:37 EDT 2010

On Tue, 24 Aug 2010 20:46:37 -0400, waldo kitty wrote:
> On 8/24/2010 20:29, Nigel Houghton wrote:
>> On Tue, 24 Aug 2010 20:08:00 -0400, waldo kitty wrote:
>>> since arachnids/whitehats.com is long gone by several years, why do
>>> we still
>>> have all of the erroneous references to it and its database in the 
>>> sigs and
>>> references file?
>>> what i find about it now, and for the last 2 or 3 years, is a park
>>> page on some host out of OZ...
>>> can we get these removed, please?
>> Yes, we already have a bug open to remove the arachnids references.
>> We'll also be adding OSVDB as a reference type with the 2.9 release.
> thanks for that... may i ask why it has taken so long? whitehats was 
> dead when i 
> first came to snort some 3 or 4 years ago :? :(

Honestly, it's just not a reference that we pay attention to. We've 
been meaning to remove it for a long time, just haven't gotten round to 

Nigel Houghton
Head Mentalist
SF VRT Department of Intelligence Excellence
http://vrt-sourcefire.blogspot.com && http://labs.snort.org/

More information about the Snort-users mailing list