Snort mailing list archives
RES: rule+snort updates? [Snort-users]
From: "Romulo M. Cholewa" <rmc () rmc eti br>
Date: Thu, 30 Jan 2003 16:25:24 -0300
A complement: If you are planning to use the vision18 rules, don't forget to update the classification file with the vision18.conf new classifications. About gzip: I didn't notice first, but there is a compatible w2k/xp etc. version :D Romulo M. Cholewa Home : http://www.rmc.eti.br Forum: http://zeus.rmc.eti.br/forum PGP Keys Available @ website. "You cannot go back and have a brand new start, but you can start right now and change the way it ends." ]-----Mensagem original----- ]De: Romulo M. Cholewa ]Enviada em: quinta-feira, 30 de janeiro de 2003 12:58 ]Para: snort-users () lists sourceforge net ]Assunto: [Snort-users] RES: rule+snort updates? ] ] ]Also, ] ]If someone is using snort on windows and want to update, you ]can check this site: ] ]http://www.silicondefense.com/techsupport/winsnortisa.htm ] ]Great article, I think someone already posted it here. I ]personally don't use pkware, I use an old gzip util: ] ]ftp://tug.ctan.org/tex-archive/tools/zip/info-zip/MSDOS/gzip124.exe ] ]It's free, but you'll have to deal with file renaming, since ]it does not understand filenames greater than 8.3. ] ]Good luck, ] ]Romulo M. Cholewa ]Home : http://www.rmc.eti.br ]Forum: http://zeus.rmc.eti.br/forum ]PGP Keys Available @ website. ] ] ] ]]-----Mensagem original----- ]]De: Eduardo Kita [mailto:ekita () sef rj gov br] ]]Enviada em: quinta-feira, 30 de janeiro de 2003 08:36 ]]Para: Rigoberto De la Portilla ]]Cc: snort-users () lists sourceforge net ]]Assunto: Re: rule+snort updates? ]] ]] ]] From one of the docs available at Snort.org.... ]] ]]---- ]][root@morpheus snort]# cat snort.rules.update.sh ]]#!/bin/bash ]] ]]# Update rules ]]cd /tmp ]]rm -rf rules ]]/usr/bin/wget http://www.snort.org/downloads/snortrules.tar.gz ]]tar -xvzf snortrules.tar.gz ]]mv /tmp/rules/* /etc/snort/rules ]] ]]--- ]] ]]============ ]]Eduardo Kita ]]Equipe Unix ]] SEF - RJ ]]============ ]] ]] ]] ]] ]]Rigoberto De la Portilla wrote: ]] ]]>are there any scripts out there that i can setup on a ]]>cron to update my snort+ rules automatically? ]]> ]]>===== ]]> ]]>Rigoberto De La Portilla ]]>MCSE, WCSP ]]> ]]>computer books and other items for SALE !!!!! ]]>check the site http://cb0.net/~rigo ]]> ]]> ]]>__________________________________________________ ]]>Do you Yahoo!? ]]>Yahoo! Mail Plus - Powerful. Affordable. Sign up now. ]]>http://mailplus.yahoo.com ]]> ]]> ]]>------------------------------------------------------- ]]>This SF.NET email is sponsored by: ]]>SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! ]]>http://www.vasoftware.com ]]>_______________________________________________ ]]>Snort-users mailing list ]]>Snort-users () lists sourceforge net ]]>Go to this URL to change user options or unsubscribe: ]]>https://lists.sourceforge.net/lists/listinfo/snort-users ]]>Snort-users list archive: ]]>http://www.geocrawler.com/redir-sf.php3?list=snort-users ]]> ]]> ]]> ]]> ]] ]] ]] ]]------------------------------------------------------- ]]This SF.NET email is sponsored by: ]]SourceForge Enterprise Edition + IBM + LinuxWorld = Something ]]2 See! http://www.vasoftware.com ]]_______________________________________________ ]]Snort-users mailing list ]]Snort-users () lists sourceforge net ]]Go to this URL to change user options or unsubscribe: ]]https://lists.sourceforge.net/lists/listinfo/sn]ort-users ]] ]]Snort-users list archive: ]]http://www.geocrawler.com/redir-sf.php3?list=snort-users ]] ] ] ]------------------------------------------------------- ]This SF.NET email is sponsored by: ]SourceForge Enterprise Edition + IBM + LinuxWorld =omething 2 ]See! http://www.vasoftware.com ]_______________________________________________ ]Snort-users mailing list ]Snort-users () lists sourceforge net ]Go to this URL to change user options or unsubscribe: ]https://lists.sourceforge.net/lists/listinfo/sn]ort-users ] ]Snort-users list archive: ]http://www.geocrawler.com/redir-sf.php3?list=ort-users ] ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RES: rule+snort updates? [Snort-users] Romulo M. Cholewa (Jan 30)
- <Possible follow-ups>
- RES: rule+snort updates? [Snort-users] Romulo M. Cholewa (Jan 30)