Re: How to verify that snort has the latest rules

[JJC <cummingsj () gmail com>]

A simple hash verification should suffice


On Mon, Sep 23, 2013 at 12:38 PM, <Hanson.Webster () salemfive com> wrote:

> Is there a way to tell if my snort device has the latest rules for
> Sourcefire?  I know I can run pulledpork manually to make sure it works,
> but is there a log to check or a command I can run that will tell me what
> version of the rules I have installed?  I am building a snort device that
> will be deployed to a remote location and I won’t have access to it, so I
> want to make sure it is working before I ship it out.****
> ------------------------------
>
> *Hanson M. Webster* | Network and Security Analyst | Salem Five Bank |
> 210 Essex Street, Salem MA 01970 | Tel: 978.720. 5230 | Fax: 978.498.0230|
> www.salemfive.com****
>
> ** **
>
> This information may be confidential and/or privileged.  Use of this
> information by anyone other than the intended recipient is prohibited.  If
> you receive this message in error, please inform the sender and remove any
> record of this message.****
>
> ** **
>
>
> ------------------------------------------------------------------------------
> October Webinars: Code for Performance
> Free Intel webinars can help you accelerate application performance.
> Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most
> from
> the latest Intel processors and coprocessors. See abstracts and register >
> http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!