Snort mailing list archives

Re: Persistant URL for rules md5sum


From: Nigel Houghton <nhoughton () sourcefire com>
Date: Wed, 14 Jul 2010 20:27:21 -0400

Scripting you say? Do you use oinkmaster or pulledpork? Did you try
http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode
here>/<filename>.md5

e.g. http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode
here>/snortrules-snapshot-2860.tar.gz.md5

Which would of course go with the file
http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode
here>/snortrules-snapshot-2860.tar.gz

On Wed, Jul 14, 2010 at 7:00 PM,  <zultan () mad scientist com> wrote:

I sent the below to the snort-sigs list yesterday.  But it never made it
out.

----------------------------------


Is there a URL for the rules' md5sum that will persist through rule updates?

Before the unannounced change fiasco two weeks ago, the URL was:
www.snort.org/pub-bin/oinkmaster.cgi/${OINKCODE}/${RULES_FILE_NAME}.md5

Then for the 2.8.5.3 rules, two weeks ago it changed to:
www.snort.org/downloads/78/show_md5

And now, after the 13 July update the 2.8.5.3 rules are at:
www.snort.org/downloads/82/show_md5

Many of us need an md5sum URL suitable for scripting.


Z


------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-- 
Nigel Houghton
Head Mentalist
SF VRT
http://vrt-sourcefire.blogspot.com && http://labs.snort.org/

------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: