Snort mailing list archives

Problem updating Snort Rules on IPCop 1.14.16


From: Mike Guiterman <mike.guiterman () sourcefire com>
Date: Tue, 20 Nov 2007 11:22:29 -0500

For those of you who are having an issue updating Snort Rules with IPCop 1.14.16.  The IPCop team has published a 
solution on http://ipcop.org/.  The text is also below.  Thanks to Jukka for sending this in!

______________


"If you update snort rules actually, snort now will fail to start.
The reason is that now snort.org publish rules now on *current* branch 
that are no more compatible with snort-2.6.1.5

To fix the issue, you would need to manually change the URL for rules 
download and load again the rules that will be accepted by snort-2.6.1.5.

Change has to be made on /usr/local/bin/snortrules.pl
Replace
my $rulesbranch="current";
by
my $rulesbranch="2.6";

2.6 branch was not available until recently.

You may have to wait 15 mn after a previous rules load to be allowed to 
load rules again.

This problem is fixed on next IPCop release that will be published soon 
for testing and should be officially released the 25 November."


Have a great day.

Mike

__
Mike Guiterman
Snort Community Manager
Sourcefire, Inc.
410-423-1930


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: