Snort Rules/VRT Enhancement?

[John Hally <JHally () epnet com>]

Hello all,

 

 

What ever happened to the actual snort signatures being included in the
snort signature database?  I know I've brought this up before, and I think
the consensus was that they weren't put in there as it may disclose the VRT
rules to non-subscribers, but I don't think I ever saw a reply from the
Snort team.  For me, this is the single most missing feature from the
database.  The information is excellent, but I always find myself going back
to whatever sig mgmt tool I have and search through the sigs to validate
alerts.  This is sometimes the most time consuming part of the forensics.

 

Snort Team - Does the VRT subscription have this functionality?  If it
doesn't it would be a great enhancement IMHO.  I think that would drive me
to subscribe.

 

 

??

 

 

Thanks!

 

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users