Snort mailing list archives

Re: apparent discrepancies at http://www.snort.org/vrt/


From: Nigel Houghton <nhoughton () sourcefire com>
Date: Thu, 12 Feb 2009 15:07:54 -0500

On Thu, Feb 12, 2009 at 2:40 PM, Tim Maletic <tmaletic () gmail com> wrote:
 On Thu, Feb 12, 2009 at 2:22 PM, Nigel Houghton
<nhoughton () sourcefire com> wrote:
Yes, we are aware of this issue. The shared object rules are not
reflected in the changelog. All shared object rules are listed in the
advisory for the rule release though as you found out.

I want to be able to go from VRT advisory -> GID|SID -> rulename, so
that I can objdump rulename to convince myself that the VRT rules I've
downloaded actually contain the update.  -tm

The best that we can do right now is to give the GID/SID combos for
the shared object rules in the advisory text for the rule release, we
are not able at this time to include the rule information in the
changelog in the same way we do for regular text rules. We know about
the issue and we are working on it.

Apologies for the inconvenience.

--
Nigel Houghton
Head Mentalist
SF VRT
http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: