Re: incremental download of snort rules

[James Lay <jlay () slave-tothe-box net>]

That and separating out the distros....maybe pulledpork can send the
distro it uses, and then only download those so rules..no need to
download all of them if I'm only going to use one.
James
On Thu, 2017-02-23 at 13:01 +0000, Joel Esler (jesler) wrote:
> No, the packages are as a whole and overwrite each other.
>
> We are, however, thinking and planning of this, coupled with a
> management feature from Snort.org.
>
> More to come.
>
> --
> Joel Esler | Talos: Manager | jesler () cisco com
>
>
>
>
>
>
> > On Feb 22, 2017, at 5:50 PM, greg.mcnathansonsnuf003 () gmx-topmail de
> >  wrote:
> >
> > Considering the steadily growth of snort rules and download file
> > size, I'm wondering if snort rules can be 
> > downloaded incrementally. Meaning only the changes since a defined
> > base version (e.g. monthly, weekly, daily...) are downloaded.
> > Thus saving bandwidth and resources on the server and on the client
> > side either.
> >
> > Does anyone know if and how snort rules files can be downloaded
> > incrementally?
> >
> >
> >
> > -----------------------------------------------------------------
> > -------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the
> > latest Snort news!
> -------------------------------------------------------------------
> -----------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!