Snort mailing list archives

Re: rules


From: Michael Boman <michael.boman () securecirt com>
Date: Fri, 30 Nov 2001 13:35:14 +0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday 30 November 2001 13:02, Arvind Clemente wrote:
Hello Everybody,
    I am a newbie in snort and want to ask which rulessets are better
Maxvision or Default snort rulesets.

Thanks in Advance

Rgds
Arvind Clemente

I'd say the snort.org ruleset, as that is actually maintained. Max is 
serving some time for a.. what to say.. an 'oops'?.. so neither whitehats.com 
not the vision.rules are actively maintained (and whitehats.com disappears 
from the 'net from time to time).

Best regards
 Michael Boman

- -- 
Michael Boman       Mobile: +65 96942601  750C Chai Chee Road
Security Architect  Phone : +65 243 6800  #04-01
SecureCiRT          Fax   : +65 441 5119  Singapore 469003
http://www.securecirt.com mailto:michael.boman () securecirt com

GnuPG: FA4E C6CC B73E 320E 3349  C64F 76CE 5F40 98AB 689C
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8BxqWds5fQJiraJwRAo4ZAJkBCQxE4WdSKD+TSN4tl/r48obHMACgh5KS
aXYaDMjDcPK+9I5OWfO8WP0=
=SKX1
-----END PGP SIGNATURE-----

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: