RE: [Snort-sigs] sigs with asn1 fails

["Joshua Berry" <jberry () PENSON COM>]

This was my point.  That I haven't seen the asn1 keyword at all when
using www.snort.org/dl/rules/snortrules-snapshot-2_1.tar.gz (which is
how it is supposed to be but some people are complaining that they are
and that it is hosing their Snort 2.1.3).

What I was saying is that it was highly unlikely given that I
auto-update every 12 hours and haven't seen the problem.  The only thing
that I could think of that could be happening is they are pointed to
www.snort.org/dl/rules/snortrules-snapshot-CURRENT.tar.gz and not
snapshot-2_1.tar.gz.

-----Original Message-----
From: Brian [mailto:bmc () snort org] 
Sent: Wednesday, July 28, 2004 9:40 AM
To: Joshua Berry
Cc: snort
Subject: Re: [Snort-sigs] sigs with asn1 fails

On Wed, Jul 28, 2004 at 08:44:30AM -0500, Joshua Berry wrote:
> I update twice a day with oinkmaster pointed to
> www.snort.org/dl/rules/snortrules-snapshot-2_1.tar.gz and have not
seen
> the asn1 keyword in any of the rules I downloaded.  However, I tested
> downloading www.snort.org/dl/rules/snortrules-snapshot-2_1.tar.gz and
it
> has the keyword and so does
> www.snort.org/dl/rules/snortrules-snapshot-CURRENT.tar.gz
>
> Maybe these people are using the CURRENT rules, or I just happen to be
> downloading when they fix the problem every single time.

Uh, fix the problem every single time?  I've never seen the rules get
asn1 added to them.  These files are generated automagically every
hour from a simple cvs update & tar.

If you see it, send me the complete tgz and I'll look into it.

Brian


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_idG21&alloc_id040&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users