Snort mailing list archives

Re: When Upgrading Breaks Auto Rule Management


From: Joel Esler <jesler () sourcefire com>
Date: Thu, 28 Apr 2011 12:47:30 -0400

On Thu, 2011-04-28 at 16:10 +0000, Eoin Miller wrote:

Then it occurred to me, go to the site and check if 2.9.0.5 rules are 
available yet for registered users and after reviewing that site and the 
SourceFire blog, it was clear that 30 days have not passed yet. Is it 
possible to get some kind of place holder to pull down the 2.9.0.4 
version of the rules until the 2.9.0.5 rules are available? Otherwise if 
users roll out a new sensor within the first 30 days of a new Snort 
version being released, their VRT auto rule updating will break until 
the 30 days has expired.

Eoin,

Maybe I am not understanding what you are asking here, but if you change
2905 to 2904 in pulledpork, it'll grab the 2904 rules.  Is that what you
are asking?  

Joel


------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: