Re: New to Splunk, need some help determining which tar.gz contains the latest rules.

["Brendan Bell \(brebell\) via Snort-sigs" <snort-sigs () lists snort org>]

Jeremie,

Welcome to Snort!

the most recent Snort3 rules are https://snort.org/downloads/subscriber/snortrules-snapshot-31470.tar.gz

Have you looked into light speed for Snort3?
Snort - Network Intrusion Detection & Prevention System 
<https://snort.org/downloads/subscriber/snortrules-snapshot-31470.tar.gz>
Snort is an open-source, free and lightweight network intrusion detection system (NIDS) software for Linux and Windows 
to detect emerging threats.
snort.org




________________________________
From: Snort-sigs <snort-sigs-bounces () lists snort org> on behalf of Jeremie Legault <jeremie.legault () systemfix ca>
Sent: Thursday, July 13, 2023 11:39 AM
To: snort-sigs () lists snort org <snort-sigs () lists snort org>
Subject: Re: [Snort-sigs] New to Splunk, need some help determining which tar.gz contains the latest rules.

Sorry new to SNORT.
      Jeremie Legault
      Email - jeremie.legault () systemfix ca<mailto:jeremie.legault () systemfix ca>
      Direct Contact - 613-276-3585


On Thu, Jul 13, 2023 at 11:38 AM Jeremie Legault <jeremie.legault () systemfix ca<mailto:jeremie.legault () systemfix 
ca>> wrote:
I'm new to Splunk, trying to determine which rules download is the most current. I'd like to apply it to a new install.

I've subscribed, so I'm able to download the subscribed rules. My confusion is due to the lack of order on the rules 
download page.I assume the largest numerical value is the most recent release but due to the site which is listed in 
the order below I'm unsure. Could someone shed some light on this for me?

v3.0snortrules-snapshot-3100.tar.gz
snortrules-snapshot-3140.tar.gz
snortrules-snapshot-3031.tar.gz
snortrules-snapshot-3101.tar.gz
snortrules-snapshot-31110.tar.gz
snortrules-snapshot-31150.tar.gz
snortrules-snapshot-31440.tar.gz
snortrules-snapshot-31210.tar.gz
snortrules-snapshot-31350.tar.gz
snortrules-snapshot-31470.tar.gz
Talos_LightSPD.tar.gz
snortrules-snapshot-3000.tar.gz
snortrules-snapshot-31180.tar.gz
snortrules-snapshot-31200.tar.gz
snortrules-snapshot-3130.tar.gz
snortrules-snapshot-3150.tar.gz
snortrules-snapshot-3170.tar.gz
snortrules-snapshot-3190.tar.gz
snortrules-snapshot-3034.tar.gz
snortrules-snapshot-3110.tar.gz

      Jeremie Legault
      Email - jeremie.legault () systemfix ca<mailto:jeremie.legault () systemfix ca>
      Direct Contact - 613-276-3585

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!