Snort mailing list archives

Re: doc/signature files in Snort-2.9.0.5


From: Dheeraj Gupta <dheeraj.gupta4 () gmail com>
Date: Thu, 28 Apr 2011 09:58:14 +0530

My Bad. I did not look hard enough. But thanks for the info :)

On Wed, Apr 27, 2011 at 11:09 PM, Nigel Houghton
<nhoughton () sourcefire com>wrote:

On Wed, 27 Apr 2011 18:05:14 +0200, Dheeraj Gupta wrote:
Hi,
I have recently upgraded from Snort 2.8.6.1 to 2.9.0.5. Previously
snort installation had a directory
/snort_install_path/etc/doc/signatures (or something of that sort)
which listed .txt files for all the signatures giving details of the
signature like Affected Systems, Ease of Attack, References, False
Positives etc. However, in the 2.9.0.5 installation I could not find
those files. Have they been removed? I had written a program that
used information contained in those files to extract affected systems
information and verify the alerts. How should I source that
information from current snort installation

Regards,
Dheeraj

Yes.

You can find them at:

 http://www.snort.org/snort-rules/

Where it says "Rule Documentation".

I would point you at the email that went out regarding this change, but
I would hope a simple search of the mailing list archives would get
some results for you.

--
Nigel Houghton
Head Mentalist
SF VRT Department of Intelligence Excellence
http://vrt-blog.snort.org/ && http://labs.snort.org/




-- 
To iterate is human.To recurse, divine!
------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: