[Snort-users] When Upgrading Breaks Auto Rule Management

Joel Esler jesler at ...1935...
Thu Apr 28 12:47:30 EDT 2011


On Thu, 2011-04-28 at 16:10 +0000, Eoin Miller wrote:

> Then it occurred to me, go to the site and check if 2.9.0.5 rules are 
> available yet for registered users and after reviewing that site and the 
> SourceFire blog, it was clear that 30 days have not passed yet. Is it 
> possible to get some kind of place holder to pull down the 2.9.0.4 
> version of the rules until the 2.9.0.5 rules are available? Otherwise if 
> users roll out a new sensor within the first 30 days of a new Snort 
> version being released, their VRT auto rule updating will break until 
> the 30 days has expired.

Eoin,

Maybe I am not understanding what you are asking here, but if you change
2905 to 2904 in pulledpork, it'll grab the 2904 rules.  Is that what you
are asking?  

Joel





More information about the Snort-users mailing list