[Snort-users] *.rules files empty

Joel Esler jesler at ...1935...
Mon Sep 23 14:06:17 EDT 2013


Lukáš,


I think you're looking for is at  "http://blog.snort.org/2012/03/rule-category-reorganization.html.”

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire


On Sep 20, 2013, at 4:41 AM, Lukáš Vízner <lukasvizner at ...11827...> wrote:

> Hi all,
> 
> I am a new one and I am a bit confused about the rules files stored in /rules folder. I had downloaded snortrules-snapshot-2953.tar.gz and I used tar -zvxf snortrules-snapshot-2953.tar.gz command to unzip the archiv. When I look into the /rules folder where are all these snort rules files and try to open some it is just empty. For example I open telnet.rules file and all content is : 
> 
> # Copyright 2001-2013 Sourcefire, Inc. All Rights Reserved.
> #
> # This file contains (i) proprietary rules that were created, tested and certified by
> # Sourcefire, Inc. (the "VRT Certified Rules") that are distributed under the VRT
> # Certified Rules License Agreement (v 2.0), and (ii) rules that were created by
> # Sourcefire and other third parties (the "GPL Rules") that are distributed under the
> # GNU General Public License (GPL), v2.
> #
> # The VRT Certified Rules are owned by Sourcefire, Inc. The GPL Rules were created
> # by Sourcefire and other third parties. The GPL Rules created by Sourcefire are
> # owned by Sourcefire, Inc., and the GPL Rules not created by Sourcefire are owned by
> # their respective creators. Please see http://www.snort.org/snort/snort-team/ for a
> # list of third party owners and their respective copyrights.
> #
> # In order to determine what rules are VRT Certified Rules or GPL Rules, please refer
> # to the VRT Certified Rules License Agreement (v2.0).
> #
> #--------------
> # TELNET RULES
> #--------------
> 
> Can anybody explain me why?
> Thank you 
> 
> -- 
> Lukáš Vízner
> ------------------------------------------------------------------------------
> LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
> 1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
> 2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
> Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
> http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk_______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!





More information about the Snort-users mailing list