Re: Rule sets are empty sets

[wkitty42--- via Snort-sigs <snort-sigs () lists snort org>]

On 10/11/20 3:06 PM, Mark Bishop via Snort-sigs wrote:
> Recently I subscribed to the Snort Rule Set and, upon inspection, I find many of 
> the rule categories have no rules. For example, the snort_blacklist.rules 
> contain no riles.


this sounds like old rules files are still in place to avoid problems with 
installs specifically attempting to load them...

as rules are recategorized and moved, some old rules files will become 
"empty"... but systems that specifically load them will fall over if the file 
doesn't exist... so the empty files (with only comments left in them) are still 
maintained and distributed...

the key is to make sure you do not attempt to actually use/load those files...


--
 NOTE: No off-list assistance is given without prior approval.
       *Please keep mailing list traffic on the list where it belongs!*
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" 
https://snort.org/downloads/#rule-downloads";>emerging threats</a>!