Snort mailing list archives

Re: Emerging Threats and VRT Rules MD5 mismatch


From: Alex McDonnell <amcdonnell () sourcefire com>
Date: Mon, 13 Feb 2017 15:51:43 -0500

If I understand correctly you're saying that the two rulesets don't match?
Each ruleset is distinct, and is distributed by different organizations,
that is to be expected.

Alex McDonnell
TALOS (VRT ruleset)

On Mon, Feb 13, 2017 at 3:44 PM, Richard Gaylord <
sekurconsulting05 () gmail com> wrote:

Hi,

While using pfSense, both with Snort and Suricata (at different times),
the Emerging Threats and VRT Rules MD5 sums are not matching.  I get
matches for the Snort GPLv2, Snort OpenAppID Detectors and Snort OpenAppID
RULES Detectors.

Any help would be greatly appreciated.

Thanks.

R

------------------------------------------------------------
------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

http://www.snort.org

Please visit http://blog.snort.org for the latest news about Snort!

Visit the Snort.org to subscribe to the official Snort ruleset, make sure
to stay up to date to catch the most <a href="
https://snort.org/downloads/#rule-downloads";>emerging threats</a>!

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

http://www.snort.org

Please visit http://blog.snort.org for the latest news about Snort!

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!

Current thread: