Snort mailing list archives

Re: Sourcefire VRT Certified Snort Rules Update


From: Joel Esler <jesler () sourcefire com>
Date: Wed, 5 May 2010 08:31:06 -0400

On Wed, May 5, 2010 at 7:54 AM, Nigel Houghton <nhoughton () sourcefire com>wrote:

On Wed, May 5, 2010 at 4:37 AM, Kayvan Javid


Registered Users:
There are no new symlinks for registered users as the new packages
won't be available to registered users for 30 days.

Can someone please clarify the situation for registered users.

When the 30day release cycle comes around, will the registered users
then have access to the symlinks, joining the deprecated naming
convention to the new style.

I have seen mention in all of the sans notices and snort literature that
the old style names will become deprecated in June.  How long before the
symlinks are removed entirely?



There will not be any symlinks for registered users. You will have to
use the new names as soon as the new rule packs reach the 30 day
limit.

The symlinks will also disappear for subscribers at the same time.


Just for clarification, when I wrote the original articles, I said this in
the articles:

"*If you are NOT a Snort VRT rules subscriber* (aka, registered user, you
don't pay for it, and you get the rulepack after the "30-day free window" is
lifted) you need to make the change.  So for example, if
snortrules-snapshot-CURRENT.tar.gz is in your rule download URL, you need to
update it to snortrules-snapshot-2853.tar.gz (or
snortrules-snapshot-2860.tar.gz if you update).  The Symlinks will NEVER
apply to you, as the new packages won't be available to registered users for
30 days."

Nigel is correct, (never said he was wrong either).  The symlinks will never
appear to non-subscribers.  All the registered people have to do is correct
it to the new naming format.

J
------------------------------------------------------------------------------
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

Current thread: