Re: Persistent problems with rule updates for Registerd Users

[Jason <jason () brvenik com>]

On Thu, Jan 3, 2013 at 9:32 AM, Michael Steele <michaels () winsnort com> wrote:

> I have a complete set of configuration files in my snort executable, I have
> a complete set of configuration files in the rules tarball, and yet I’m
> still required to download yet another snort.conf in order to get the
> current one.

Yes. You are expected to manage your own configuration. You are
expected to make changes at every revision and to actively do so for
each rules release too. This isn't FW or AV and requires a but of
investment on your part to be successful.

> The problem of configuration files and rule distribution needs to be
> addressed, and fixed.

Where is the problem? You are not the only user and your snowflake
isn't the only unique one. There are others that need the
configuration file without the rules. Both revision separately and
many manage their own. Is it too much of a burden to expect users of
advanced software handling advanced things to manage minor revisions
and configuration changes?

> Best regards,
>
> Michael...
>
>
>
> From: Russ Combs [mailto:rcombs () sourcefire com]
> Sent: Thursday, January 03, 2013 8:37 AM
> To: Michael Steele
> Cc: snort-users () lists sourceforge net
> Subject: Re: [Snort-users] Persistent problems with rule updates for
> Registerd Users
>
>
>
>
>
> On Wed, Jan 2, 2013 at 9:23 PM, Michael Steele <michaels () winsnort com>
> wrote:
>
> I just downloaded the latest rule set for the ‘Registered Users’ titled
> snortrules-snapshot-2940.tar.gz. It STILL contains an OLD snort.conf. It’s
> missing port assignments, and it still includes the ‘output database’
> option.
>
>
>
> This was a previous problem and there were assurances it was taken care of.
> Looks like someone is not doing their job?
>
>
>
> I get that you are perhaps a little frustrated, but I don't get how that
> last statement helps your cause.  Just sayin'.
>
>
>
> Can someone pull the Registered Users tarball
> (snortrules-snapshot-2940.tar.gz) and verify all the rules and configuration
> files are up-to-date?
>
>
>
> Best regards,
>
> Michael...
>
>
>
>
> ------------------------------------------------------------------------------
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnmore_122712
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort
> news!
>
>
>
>
> ------------------------------------------------------------------------------
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnmore_122712
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort
> news!

------------------------------------------------------------------------------
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122712
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!