Snort mailing list archives
Re: apparent discrepancies at http://www.snort.org/vrt/
From: Nigel Houghton <nhoughton () sourcefire com>
Date: Thu, 12 Feb 2009 15:07:54 -0500
On Thu, Feb 12, 2009 at 2:40 PM, Tim Maletic <tmaletic () gmail com> wrote:
On Thu, Feb 12, 2009 at 2:22 PM, Nigel Houghton <nhoughton () sourcefire com> wrote:Yes, we are aware of this issue. The shared object rules are not reflected in the changelog. All shared object rules are listed in the advisory for the rule release though as you found out.I want to be able to go from VRT advisory -> GID|SID -> rulename, so that I can objdump rulename to convince myself that the VRT rules I've downloaded actually contain the update. -tm
The best that we can do right now is to give the GID/SID combos for the shared object rules in the advisory text for the rule release, we are not able at this time to include the rule information in the changelog in the same way we do for regular text rules. We know about the issue and we are working on it. Apologies for the inconvenience. -- Nigel Houghton Head Mentalist SF VRT http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/ ------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- apparent discrepancies at http://www.snort.org/vrt/ Tim Maletic (Feb 12)
- Re: apparent discrepancies at http://www.snort.org/vrt/ Nigel Houghton (Feb 12)
- Re: apparent discrepancies at http://www.snort.org/vrt/ Tim Maletic (Feb 12)
- Re: apparent discrepancies at http://www.snort.org/vrt/ Nigel Houghton (Feb 12)
- Re: apparent discrepancies at http://www.snort.org/vrt/ Tim Maletic (Feb 12)
- Re: apparent discrepancies at http://www.snort.org/vrt/ Nigel Houghton (Feb 12)