Snort mailing list archives
Re: Updating Rules?
From: Andy Richter <jarichte () syr edu>
Date: Thu, 12 Feb 2004 16:32:08 -0500
oinkmaster http://oinkmaster.sourceforge.net/ --andy richter On Feb 12, 2004, at 4:04 PM, Vines Scott D 2d Lt AFFTC/IT wrote:
While we're on the subject of updating rules: I have customized my own rule files by disabling certain alerts within the files (but not turning off the entire rule set)...is there a graceful way to update rules without having toturn these off again? -----Original Message----- From: Dusty Hall [mailto:halljer () auburn edu] Sent: Thursday, February 12, 2004 12:17 PM To: snort-users () lists sourceforge net Subject: [Snort-users] Updating Rules? I'm curious about the process of updating Snort 2.1.0 (NOT 2.1.1 RC1) rules. Snort.org list the following for rule packages: CURRENT - development is done here. Be careful if you use CURRENT 2_1 - the "stable" branch, where we do bug fixes for the currently "shipping" snort. probably ok for production, might not be release quality yet 2_0 - the "deprecated" branch, most definately release quality, but not really worked on, except for rule updates Which should I use for 2.1.0? Is 2.1.1 RC1 the "currently "shipping" snort"? Should I update? Thank goodness I don't use oinkmaster to autoupdate... Thanks, -Dusty ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Updating Rules? Dusty Hall (Feb 12)
- Re: Updating Rules? Andreas Östling (Feb 12)
- <Possible follow-ups>
- RE: Updating Rules? Vines Scott D 2d Lt AFFTC/IT (Feb 12)
- Re: Updating Rules? Andy Richter (Feb 12)
- RE: Updating Rules? Paul Schmehl (Feb 12)
- RE: Updating Rules? AJ Butcher, Information Systems and Computing (Mar 25)
- RE: Updating Rules? John Creegan (Feb 12)
- Re: Updating Rules? Dusty Hall (Feb 12)
- Re: Updating Rules? Paul Schmehl (Feb 12)