Re: Snort rules

[Erek Adams <erek () theadamsfamily net>]

On Wed, 24 Apr 2002, James Ainslie wrote:

> It seems that the whitehats site is inactive, and
> it was a great source for snort rule updates.

It was.  6-8 months ago.

> Does anybody know of any other repository of this type,
> where I could keep an up to date version of the rules.

Yes.

> Also it would be nice to have access to a descripition
> of the vulnerabilities and signitures the rules apply to
> are there any leads on a site like this.

Might want to try a super secret site that we don't like people to know about
much....

        http://www.snort.org/

Stable rules:

        http://www.snort.org/dl/signatures/snortrules.tar.gz

Right now, that's where the main rule development is taking place, along with
the snort-DB is being built.

        http://www.snort.org/snort-db

No, it's not whitehats.  But the number of populated sigs grows every day.

        http://www.snort.org/snort-db/help-us.html

Oh, and ummm...  Take three penalty drinks.  ;-)

        http://www.theadamsfamily.net/~erek/snort/drinking_game.txt

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users