[Snort-users] URL to download VRT rules

Weir, Jason jason.weir at ...14916...
Thu Oct 28 12:25:29 EDT 2010


If you can't upgrade snort to 2.8.6.1 or 2.9 then you can't use the VRT
ruleset.
 
Ok - since you asked...
 
Emerging Threats supports supports back to 2.8.4 I believe...
 
-J
 

	-----Original Message-----
	From: Alejandro Cabrera Obed [mailto:aco1967 at ...11827...] 
	Sent: Thursday, October 28, 2010 12:12 PM
	To: snort-users at lists.sourceforge.net
	Subject: Re: [Snort-users] URL to download VRT rules
	
	
	But in my case I use Snort 2.8.5.3.....what do I have to do if I
want to downbload the rules and continue with this version ???? 



	2010/10/28 Weir, Jason <jason.weir at ...14916...>
	

		No need to wait...
		 
		Once you get your snort install updated to 2.8.6.1 or
2.9 you can use the following url's in oinkmaster
		 
	
url=http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-sn
apshot-2861.tar.gz
	
url=http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-sn
apshot-2900.tar.gz
		 
		
		-J

			
			-----Original Message-----
			From: Alejandro Cabrera Obed
[mailto:aco1967 at ...11827...] 
			
			Sent: Thursday, October 28, 2010 11:54 AM
			To: snort-users at lists.sourceforge.net
			
			Subject: Re: [Snort-users] URL to download VRT
rules
			
			
			OK, I'll wait for the updated infomation about
VRT rules download through oinkmaster..... 

			Thanks again.
			
			
			2010/10/28 Joel Esler <jesler at ...1935...>
			

				Looks like we need to update the
website, but Jason is correct. 

				
				Joel

				On Oct 28, 2010, at 11:29 AM, Alejandro
Cabrera Obed wrote:


				But this is in my oinkcode section fro
Snort site: 
				
				
				Downloading with your Oinkcode
				Important Note

				We are changing the way we publish
rules. In June 2010 we stopped offering rules in the
"snortrules-snapshot-CURRENT" format. Instead, rules are released for
specific versions of Snort. You will be responsible for downloading the
correct rules release for your version of Snort. The new versioning
mechanism will require a four digit version in the file name. For the
Subscriber and Registered releases of Snort 2.8.6.0 and Snort 2.8.5.3,
the download links would look as follows:

				Subscriber Release

				*	
	
http://www.snort.org/sub-rules/snortrules-snapshot-2860.tar.gz/<oinkcode
>
				*	
	
http://www.snort.org/sub-rules/snortrules-snapshot-2853.tar.gz/<oinkcode
>



				Registered User Release

				*	
	
http://www.snort.org/reg-rules/snortrules-snapshot-2860.tar.gz/<oinkcode
>
				*	
	
http://www.snort.org/reg-rules/snortrules-snapshot-2853.tar.gz/<
<http://www.snort.org/reg-rules/snortrules-snapshot-2853.tar.gz/a9e009e9
8b55441d6aeb6983048178df82d721b9> oinkcode>



				What can I do now ????

				2010/10/28 Weir, Jason
<jason.weir at ...14916...>
				

				I think VRT only supports snort 2.8.6.1
and 2.9 - you will probably have to upgrade...
				 
				-J

				-----Original Message-----
				From: Alejandro Cabrera Obed
[mailto:aco1967 at ...11827...] 
				Sent: Thursday, October 28, 2010 11:10
AM
				To: snort-users at lists.sourceforge.net
				Subject: [Snort-users] URL to download
VRT rules
				
				
				Dear all, I've registered in snort.org
<http://snort.org/>  to download the VRT rules....I have Snort 2.8.5.3. 

				I use oinkmaster to download the rules,
but what is the new URL I have to use:

				

				*	
					
				
					This:
	
http://www.snort.org/reg-rules/snortrules-snapshot-2853.tar.gz/<
<http://www.snort.org/reg-rules/snortrules-snapshot-2853.tar.gz/a9e009e9
8b55441d6aeb6983048178df82d721b9> oinkcode>

				
				
				
				
				or this:
	
http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode>/snortrules-snapsh
ot-2853.tar.gz
				    
				
				
				Thanks a lot.

_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20101028/13b7392d/attachment.html>


More information about the Snort-users mailing list