[Snort-users] so_rule problem
nhoughton at ...1935...
Fri Oct 1 13:14:31 EDT 2010
On Fri, 01 Oct 2010 12:37:14 -0400, waldo kitty wrote:
> On 10/1/2010 10:47, Jimmy Tharel wrote:
>> I'm trying to get my Snort installation to detect the latest ms10-070
>> vulnerability. According to
>> http://www.snort.org/vrt/advisories/2010/09/23/vrt-rules-2010-09-23.html it
>> should have been included in the rules released on the 23rd.
> are you a "registered" user or a "paying subscriber" user? we lowly
> users have to wait 30 days before we get those rules... for easy
> counting, if it
> was released on Sep 23rd, we won't get access to it until Oct 23rd...
> i had similar discussion to this some time back in another venue and
> at that
> time the question was does VRT update the "registered" rules snapshot
> every day
> so that there's a "rolling release" or do they simply wait and do one
> every 30 days... AIR, no one ever answered that question or provided
> a pointer
> to where it might be answered...
Didn't see that question, but to answer it. The roll over is automatic.
SF VRT Department of Intelligence Excellence
http://vrt-sourcefire.blogspot.com && http://labs.snort.org/
More information about the Snort-users