Snort mailing list archives
RE: Snort Rule Downloading - Working now! (NOT!!!)
From: "McCash, John" <John.McCash () andrew com>
Date: Mon, 3 May 2004 15:28:15 -0500
Guys, I just ran oinkmaster to download new rules, and thought it worked. Unfortunately, upon closer examination, only the .map files were updated, not the .rules files... I'm running 2.1.2, and had downloaded the -2_1 rules file. I also downloaded the -CURRENT file, and verified that it DOES contain the rules updates. John -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net]On Behalf Of Snortty Sent: Monday, May 03, 2004 10:51 AM To: snort-users () lists sourceforge net Subject: RE: [Snort-users] Snort Rule Downloading - Working now! I just ran this oinkmaster.pl, it worked for me also! thanks for who ever fixed this - the unknown hero! SW. --- "Rowland, Krisa W ERDC-ITL-MS Contractor" <Krisa.W.Rowland () erdc usace army mil> wrote:
I ran my oinkmaster today and it updated for the first time in a while - try it. -----Original Message----- From: M. Morgan [mailto:mikemorgan () mindspring com] Sent: Monday, May 03, 2004 9:19 AM To: Gus Fritschie; snort-users () lists sourceforge net Subject: RE: [Snort-users] Snort Rule Downloading - No Updates Since 4/15? FYI: Snortcenter has the same problem and requires the .conf to be edited with the new download URL for sigs. Even then if fails to update "some" of the rules but it gets alot of them. -----Original Message----- From: Gus Fritschie <gfritschie () hotmail com> Sent: Apr 30, 2004 3:12 PM To: snort-users () lists sourceforge net Subject: RE: [Snort-users] Snort Rule Downloading - No Updates Since 4/15? That is correct, I posted about this subject a couple of weeks ago and it does not appear that either the 2.0 or 2.1 rules are being updated..........From: "Rowland, Krisa W ERDC-ITL-MS Contractor" <Krisa.W.Rowland () erdc usace army mil> To: 'Snortty' <cwcwcwg () yahoo com>, Matt Kettler<mkettler () evi-inc com>,"Shaffer, Paul D" <paul.d.shaffer () lmco com>, snort-users () lists sourceforge net Subject: RE: [Snort-users] Snort Rule Downloading -No Updates Since 4/15?Date: Fri, 30 Apr 2004 13:55:24 -0500 This has been a major topic of conversation - noone has gotten updates ina really long time. Seems that the only sig updatesthat are coming out arefor CURRENT. -----Original Message----- From: Snortty [mailto:cwcwcwg () yahoo com] Sent: Friday, April 30, 2004 1:30 PM To: Matt Kettler; Shaffer, Paul D;snort-users () lists sourceforge netSubject: [Snort-users] Snort Rule Downloading - NoUpdates Since 4/15?Hi, All, I did snort rules downloading/updating to my rules files, using oinkmaster.pl, It did run ok, but nonewrules updated, which seems to be impossible. LasttimeI ran this was 4/15. I'm running snort 2.0.6. In the oinkmaster.conf,the url:http://www.snort.org/dl/rules/snortrules-snapshot-2_0.tar.gzWhich seems to correct. Anyone has some clues please? Thank you in advance. Snortty. __________________________________ Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover-------------------------------------------------------This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit themarket... Oracle 10g.Take an Oracle 10g class now, and we'll give youthe exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options orunsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users list archive:http://www.geocrawler.com/redir-sf.php3?list=snort-users
_________________________________________________________________
Watch LIVE baseball games on your computer with MLB.TV, included with MSN Premium!
http://join.msn.com/?page=features/mlb&pgmarket=en-us/go/onm00200439ave/dire
ct/01/
-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
__________________________________ Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------------------------------------------------ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any unauthorized use of this email is prohibited. ------------------------------------------------------------------------------------------------ [mf2] ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id149&alloc_id66&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: Snort Rule Downloading - Working now! (NOT!!!) McCash, John (May 03)