Re: Snort Rules Version Confusion

[Paul Schmehl <pauls () utdallas edu>]

--On Thursday, April 14, 2005 04:19:06 PM +0900 Mark Sargent 
<powderkeg () snow email ne jp> wrote:

> Hi All,
>
> here, http://www.snort.org/dl/ I see the latest version as
> snort-2.3.2.tar.gz <http://www.snort.org/dl/current/snort-2.3.2.tar.gz>
> which I have installed, but, here,
> http://www.snort.org/pub-bin/downloads.cgi it has,
> Snort 2.4 or higher is required to run CURRENT. Is it me, or is that
> rather confusing..? Cheers.
It's only confusing to someone who is unfamiliar with software development 
cycles and terminology.

CURRENT usually means *the most current version*.  You might think of it as 
beta or even alpha.  It's bleeding-edge development stuff.

*Most* people will want to use STABLE, which is usually defined by the 
version of snort you're using - in your case 2.3.2.tar.gz.  If you look in 
pub-bin/downloads.cgi, you'll notice that there are several versions of the 
rules, including one version that ends in 2.3.2.tar.gz.  That is the 
version you should use.

You only use CURRENT rules if you are using the *very latest* version of 
snort from CVS, not a RELEASE (or STABLE) version.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users