Re: *.rules files empty

[Joel Esler <jesler () sourcefire com>]

Lukáš,


I think you're looking for is at  "http://blog.snort.org/2012/03/rule-category-reorganization.html.”

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire


On Sep 20, 2013, at 4:41 AM, Lukáš Vízner <lukasvizner () gmail com> wrote:

> Hi all,
>
> I am a new one and I am a bit confused about the rules files stored in /rules folder. I had downloaded 
> snortrules-snapshot-2953.tar.gz and I used tar -zvxf snortrules-snapshot-2953.tar.gz command to unzip the archiv. 
> When I look into the /rules folder where are all these snort rules files and try to open some it is just empty. For 
> example I open telnet.rules file and all content is : 
>
> # Copyright 2001-2013 Sourcefire, Inc. All Rights Reserved.
> #
> # This file contains (i) proprietary rules that were created, tested and certified by
> # Sourcefire, Inc. (the "VRT Certified Rules") that are distributed under the VRT
> # Certified Rules License Agreement (v 2.0), and (ii) rules that were created by
> # Sourcefire and other third parties (the "GPL Rules") that are distributed under the
> # GNU General Public License (GPL), v2.
> #
> # The VRT Certified Rules are owned by Sourcefire, Inc. The GPL Rules were created
> # by Sourcefire and other third parties. The GPL Rules created by Sourcefire are
> # owned by Sourcefire, Inc., and the GPL Rules not created by Sourcefire are owned by
> # their respective creators. Please see http://www.snort.org/snort/snort-team/ for a
> # list of third party owners and their respective copyrights.
> #
> # In order to determine what rules are VRT Certified Rules or GPL Rules, please refer
> # to the VRT Certified Rules License Agreement (v2.0).
> #
> #--------------
> # TELNET RULES
> #--------------
>
> Can anybody explain me why?
> Thank you 
>
> -- 
> Lukáš Vízner
> ------------------------------------------------------------------------------
> LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
> 1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
> 2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
> Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
> http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk_______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!


------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!