Snort mailing list archives

Re: Question about downloading rules with Oinkmaster


From: Joel Esler <jesler () sourcefire com>
Date: Tue, 13 Jul 2010 13:56:04 -0400

If you log into snort.org, on the page where you get your oinkcode, you will are the URL you are supposed to use. 


Sent from my iPhone

On Jul 13, 2010, at 1:28 PM, "Andy Berryman" <aberryman () Cymtec com> wrote:

I saw there was a change in the rules download, but I'm a little confused on if/what I'm supposed to change in 
Oinkmaster.

 

Currently I have this in my oinkmaster:

url = http://www.snort.org/pub-bin/oinkmaster.cgi/<oink_code_removed>/snortrules-snapshot-2860_s.tar.gz

 

 

Am I supposed to change it to this?

 

url = http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode here>/sub-rules/snortrules-snapshot-2860.tar.gz

 

 

 

We are a subscriber/integrator.

 

 

Thanks,

Andy Berryman

 

 

This message from Cymtec Systems, Inc. contains confidential information and is solely for the use of the 
recipient(s) named  above. If you are not the intended recipient or an agent responsible for delivering it to the 
intended recipient, you are hereby notified that you have received this message in error and that any review, 
disclosure, copying, distribution or use of the contents of this message is strictly prohibited. If you have received 
this message in error, please destroy it immediately and notify Cymtec Systems, Inc. by telephone at +1.314.993.8700 
or by return e-mail.
 
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: