Snort mailing list archives

Re: *.rules files empty


From: Lukáš Vízner <lukasvizner () gmail com>
Date: Mon, 23 Sep 2013 21:24:09 +0200

Thank you !!! It was very useful for me !

Greetings
Lukáš


2013/9/23 Joel Esler <jesler () sourcefire com>

Lukáš,


I think you're looking for is at  "
http://blog.snort.org/2012/03/rule-category-reorganization.html.";

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire


On Sep 20, 2013, at 4:41 AM, Lukáš Vízner <lukasvizner () gmail com> wrote:

Hi all,

I am a new one and I am a bit confused about the rules files stored in
/rules folder. I had downloaded snortrules-snapshot-2953.tar.gz and I used
tar -zvxf snortrules-snapshot-2953.tar.gz command to unzip the archiv. When
I look into the /rules folder where are all these snort rules files and try
to open some it is just empty. For example I open telnet.rules file and all
content is :

# Copyright 2001-2013 Sourcefire, Inc. All Rights Reserved.
#
# This file contains (i) proprietary rules that were created, tested and
certified by
# Sourcefire, Inc. (the "VRT Certified Rules") that are distributed
under the VRT
# Certified Rules License Agreement (v 2.0), and (ii) rules that were
created by
# Sourcefire and other third parties (the "GPL Rules") that are
distributed under the
# GNU General Public License (GPL), v2.
#
# The VRT Certified Rules are owned by Sourcefire, Inc. The GPL Rules
were created
# by Sourcefire and other third parties. The GPL Rules created by
Sourcefire are
# owned by Sourcefire, Inc., and the GPL Rules not created by Sourcefire
are owned by
# their respective creators. Please see
http://www.snort.org/snort/snort-team/ for a
# list of third party owners and their respective copyrights.
#
# In order to determine what rules are VRT Certified Rules or GPL Rules,
please refer
# to the VRT Certified Rules License Agreement (v2.0).
#
#--------------
# TELNET RULES
#--------------

Can anybody explain me why?
Thank you

--
Lukáš Vízner

------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8,
SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack
includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13.

http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest
Snort news!




-- 
Lukáš Vízner
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: