Snort mailing list archives

Re: [Snort-users] EOL for Snort 2.8.5.3 and Snort 2.8.6.0 rules reminder


From: waldo kitty <wkitty42 () windstream net>
Date: Mon, 04 Oct 2010 22:03:50 -0400

On 10/4/2010 20:58, Nigel Houghton wrote:
On Mon, 4 Oct 2010 23:01:45 +0000, Michael Green wrote:
So as a registered user I really only have 60 days, because I can't
get a 2.9 rule set for another 30 days. Is that right?

No. The rule packs will still roll over, you still have the 90 days.

can you say if VRT has taken my suggestion(s) on redirecting "registered" users 
to the last "registered" user's rules snapshot file when they update their snort 
version on the bleeding edge?

for example...

when i get 2.9.0 compiled and working, my automated update routines will query 
snort for its version... they will see 2.9.0 and translate that to 2900 for the 
rules file pull... when the update script(s) contact the VRT update server with 
the OINKCODE and attempt to pull the 2900 rules sets archive, the VRT server 
will see that that OINKCODE is for a "registered" user... the last time i ran 
into this was when moving to 2.8.6.1 before there was a 2.8.6.1 archive for 
"registered" users... the update scripts got a "Forbidden" response from the VRT 
server instead of being redirected to the 2860 rules archive like they should be 
in a user/automation friendly environment... in this instance, i would expect 
that there would be a redirect to the 2861 rules archive for "registered" user 
OINKCODEs and that this would be in effect until there is a 2900 rules archive 
release in at least 30 days...

does this make sense? i do hope it does this time... it didn't seem to last time :?


------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
Spend less time writing and  rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs


Current thread: