Home page logo
/

snort logo Snort mailing list archives

Re: URL to download VRT rules
From: "Weir, Jason" <jason.weir () nhrs org>
Date: Thu, 28 Oct 2010 12:25:29 -0400

If you can't upgrade snort to 2.8.6.1 or 2.9 then you can't use the VRT
ruleset.
 
Ok - since you asked...
 
Emerging Threats supports supports back to 2.8.4 I believe...
 
-J
 

        -----Original Message-----
        From: Alejandro Cabrera Obed [mailto:aco1967 () gmail com] 
        Sent: Thursday, October 28, 2010 12:12 PM
        To: snort-users () lists sourceforge net
        Subject: Re: [Snort-users] URL to download VRT rules
        
        
        But in my case I use Snort 2.8.5.3.....what do I have to do if I
want to downbload the rules and continue with this version ???? 



        2010/10/28 Weir, Jason <jason.weir () nhrs org>
        

                No need to wait...
                 
                Once you get your snort install updated to 2.8.6.1 or
2.9 you can use the following url's in oinkmaster
                 
        
url=http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-sn
apshot-2861.tar.gz
        
url=http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-sn
apshot-2900.tar.gz
                 
                
                -J

                        
                        -----Original Message-----
                        From: Alejandro Cabrera Obed
[mailto:aco1967 () gmail com] 
                        
                        Sent: Thursday, October 28, 2010 11:54 AM
                        To: snort-users () lists sourceforge net
                        
                        Subject: Re: [Snort-users] URL to download VRT
rules
                        
                        
                        OK, I'll wait for the updated infomation about
VRT rules download through oinkmaster..... 

                        Thanks again.
                        
                        
                        2010/10/28 Joel Esler <jesler () sourcefire com>
                        

                                Looks like we need to update the
website, but Jason is correct. 

                                
                                Joel

                                On Oct 28, 2010, at 11:29 AM, Alejandro
Cabrera Obed wrote:


                                But this is in my oinkcode section fro
Snort site: 
                                
                                
                                Downloading with your Oinkcode
                                Important Note

                                We are changing the way we publish
rules. In June 2010 we stopped offering rules in the
"snortrules-snapshot-CURRENT" format. Instead, rules are released for
specific versions of Snort. You will be responsible for downloading the
correct rules release for your version of Snort. The new versioning
mechanism will require a four digit version in the file name. For the
Subscriber and Registered releases of Snort 2.8.6.0 and Snort 2.8.5.3,
the download links would look as follows:

                                Subscriber Release

                                *       
        
http://www.snort.org/sub-rules/snortrules-snapshot-2860.tar.gz/<oinkcode

                                *       
        
http://www.snort.org/sub-rules/snortrules-snapshot-2853.tar.gz/<oinkcode




                                Registered User Release

                                *       
        
http://www.snort.org/reg-rules/snortrules-snapshot-2860.tar.gz/<oinkcode

                                *       
        
http://www.snort.org/reg-rules/snortrules-snapshot-2853.tar.gz/<
<http://www.snort.org/reg-rules/snortrules-snapshot-2853.tar.gz/a9e009e9
8b55441d6aeb6983048178df82d721b9> oinkcode>



                                What can I do now ????

                                2010/10/28 Weir, Jason
<jason.weir () nhrs org>
                                

                                I think VRT only supports snort 2.8.6.1
and 2.9 - you will probably have to upgrade...
                                 
                                -J

                                -----Original Message-----
                                From: Alejandro Cabrera Obed
[mailto:aco1967 () gmail com] 
                                Sent: Thursday, October 28, 2010 11:10
AM
                                To: snort-users () lists sourceforge net
                                Subject: [Snort-users] URL to download
VRT rules
                                
                                
                                Dear all, I've registered in snort.org
<http://snort.org/>  to download the VRT rules....I have Snort 2.8.5.3. 

                                I use oinkmaster to download the rules,
but what is the new URL I have to use:

                                

                                *       
                                        
                                
                                        This:
        
http://www.snort.org/reg-rules/snortrules-snapshot-2853.tar.gz/<
<http://www.snort.org/reg-rules/snortrules-snapshot-2853.tar.gz/a9e009e9
8b55441d6aeb6983048178df82d721b9> oinkcode>

                                
                                
                                
                                
                                or this:
        
http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode>/snortrules-snapsh
ot-2853.tar.gz
                                    
                                
                                
                                Thanks a lot.

_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault