Re: VRT Rules Subscription ?

["David J. Bianco" <david () vorant com>]

True.  I forgot that he might not know that part.  Bad geek!  No cookie!

        David

Mike Guiterman wrote:
> You do have to update the URL in your oinkmaster conf file to download 
> the subscriber file.
>
> If you're using 2.7 the file name is: snortrules-snapshot-CURRENT_s.tar.gz
>
> If you're using 2.6.x the file name is:
> snortrules-snapshot-2.6_s.tar.gz
>
> regards,
>
> Mike
>
> David J. Bianco wrote:
> > Correct.  The oinkcode will be the same, and their backend will take
> > care of figuring out which rulesets it's good for.
> >
> >      David
> >
> > John Hally wrote:
> > > Hello All,
> > >
> > > I recently subscribed to the VRT ruleset (personal subs) to try out. 
> > > One question that I couldn't really find a definitive answer on is how
> > > to incorporate the download into tools (IDS Policy Mgr).  I typically
> > > just put the oinkcode into the download url entry and I'm off and
> > > running, but I didn't find an oinkcode specific to the VRT ruleset. 
> > > Even generating a new one just generated the same exact oinkcode.  Is
> > > the version (subscription or non-subscription) linked based on the
> > > oinkcode and I have to do nothing, or is there different download
> > > codes/areas I need to use.  I looked all over snort.org and unless I'm
> > > just completely missing it...
> > >
> > > Thanks in advance.
> > >
> > > JH.
> > >
> > >
> > > ------------------------------------------------------------------------
> > >
> > > -------------------------------------------------------------------------
> > > This SF.net email is sponsored by: Splunk Inc.
> > > Still grepping through log files to find problems?  Stop.
> > > Now Search log events and configuration files using AJAX and a browser.
> > > Download your FREE copy of Splunk now >>  http://get.splunk.com/
> > >
> > >
> > > ------------------------------------------------------------------------
> > >
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> > -------------------------------------------------------------------------
> > This SF.net email is sponsored by: Splunk Inc.
> > Still grepping through log files to find problems?  Stop.
> > Now Search log events and configuration files using AJAX and a browser.
> > Download your FREE copy of Splunk now >>  http://get.splunk.com/
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users