RE: Internet Update in snortcenter

["Truax, Shawn (MBS)" <Shawn.Truax () mbs gov on ca>]

Hi,
 
If you have upgraded to SnortCenter V2 then this might be a little late
coming, but for your reference the SnortCenter V1 Rule download URL is
located in the config.php file.  Look for the following lines.
 
/* URL to snort signature file & references
 * e.g. $snortrules_url = "
http://www.snort.org/dl/signatures/snortrules-stable.tar.gz
<http://www.snort.org/dl/signatures/snortrules-stable.tar.gz> ";
 */
$snortrules_url = " http://www.snort.org/dl/rules/snortrules-stable.tar.gz
<http://www.snort.org/dl/rules/snortrules-stable.tar.gz> ";


Shawn Truax
Security Specialist
Corporate Security
155 University Ave.
Toronto, Ontario
M5H 3B7
(416)327-1107

 

-----Original Message-----
From: jonasb () alum rpi edu [mailto:jonasb () alum rpi edu]
Sent: May 4, 2004 3:25 PM
To: JHally () epnet com; snort-users () lists sourceforge net
Subject: Re: [Snort-users] Internet Update in snortcenter


John -

I'm not sure that it's just a setting in a config file with the original
snortcenter. I upgraded to v2 to be able to support later versions of Snort,
and it has a configuration file setting for the download URL. If you're set
on the original snortcenter, try searching through all of the PHP files for
the update - I believe it woudl be in dbpars.php. I ran into the exact same
problem as you, and the upgrade to v2 worked.

Good luck!
B

<-----Original Message-----> 
From: John Hally
Sent: 5/4/2004 2:27:20 PM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Internet Update in snortcenter



Hello,

anyone know where the internet update for rules in Snortcenter actually
goes? I can't seem to find it anywhere as a modifiable setting, and it
always comes back as "no update at this time...", which I'm finding hard to
believe as this system has been offline for a while.

thanks!


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
.