Snort mailing list archives

Re: Downloading Snort Rules - Registered User : Weird Behavior


From: Joel Esler <jesler () sourcefire com>
Date: Thu, 14 Feb 2013 10:39:31 -0500

No.  We purposely allowed all registered users to have the same ruleset as subscriber on that day, (and for the next 30 
days they will receive the same ruleset), basically registered got a free update.  This was because of the Shared 
Object rule that was updated to mitigate a potential vulnerability.  We wanted to allow everyone to have the same 
protection.

http://blog.snort.org/2013/01/sourcefire-vrt-certified-snort-rules_22.html 

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire


On Thursday, February 14, 2013 at 4:08 AM, Dheeraj Gupta wrote:

I am a registered user of snort.org (http://snort.org) and download the registered ruleset through the command-line 
(As mentioned on your website). 
The script I wrote also keeps a log of what was the release date of the ruleset (As seen from the HTTP header). 

Till about Jan 24,2013 the script showed latest ruleset to be of Dec 20,2012 (30 days approx.) but after that from 
Jan 29,2013 onwards I saw the latest available ruleset to be Jan 24, 2013 (5 days only!!) . Even today, I can access 
the rule-set released on Jan 24,2013 through the command line but the web-site shows the latest Registered user 
ruleset to be of Dec 18,2012. 
Is something broken somewhere?

P.S. - Didn't know where to put this, so sent it to snort-sigs instead of snort-users 
------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net (mailto:Snort-sigs () lists sourceforge net)
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort! 

------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

Current thread: