Snort mailing list archives

Re: Snort version vs Snort rules version


From: Nigel Houghton <nhoughton () sourcefire com>
Date: Tue, 11 Jan 2011 11:33:51 -0500

On Tue, 11 Jan 2011 08:16:06 -0800, NA wrote:
Hello all,

It may be obvious to many that the Snort ruleset version should match 
the Snort installed version but I found myself in a different situation.

Concentrating on installing the latest Snort with all the other 
accompanying programs was my first priority. Then moving on to 
configuring and using Snort I found that the latest rules were 
subscriber only and choose to install the registered version ruleset.

So this begs the question, is it a bad idea to use the latest Snort 
version with the registered ruleset? Is there some rule of thumb to go 
by to avoid problems?

Thanks

If you use Snort 2.9.0.3 then any of the 2.9.0.x rules will work for 
you.

--
Nigel Houghton
Head Mentalist
SF VRT Department of Intelligence Excellence
http://vrt-blog.snort.org/ && http://labs.snort.org/

------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: