Snort mailing list archives

Re: utoh... 2.8.6.1 is out but what about the rules files??


From: Joel Esler <jesler () sourcefire com>
Date: Sun, 25 Jul 2010 17:13:15 -0400

On Jul 25, 2010, at 3:37 PM, waldo kitty wrote:
On 7/25/2010 14:39, Nigel Houghton wrote:
You're still not telling us what's not working. Which link are you
attempting to use? Are you trying to download Registered or Subscriber
rule packs?

my bad... i can't get to the data right now but IIRC, it was the registered user 
rules... let me see if i can get that data and find out some more information... 
it may very well be more ongoing confusing with the new url formats...


I am guessing that since the 2861 rules just came out, that the registered user people have to wait 30 days.


the ones they should be using for snort 2.8.6.1 with oinkmaster are

http://www.snort.org/pub-bin/oinkmaster.cgi/*OINKCODE*/snortrules-snapshot-2861.tar.gz

OR (for paying vrt subscribers)

http://www.snort.org/pub-bin/oinkmaster.cgi/*OINKCODE*/snortrules-snapshot-2861_s.tar.gz

No.


speaking of which, can you say if the above old oinkmaster format with the "_s" 
after the version number still works? i have no way to test it (currently) and 
have not found anyone who it s paying vrt subscriber that uses our environment 
who is willing to test this code... i'm sure they'll start popping out of the 
woodwork when it is released and fails, though :? :(

You don't need the _s anymore at all.  Sourcefire takes care of who is subscriber and who is registered on our side, 
just by looking at your oinkcode.

J


------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: