Re: [Snort-sigs] UPDATE TO BLEEDINGSNORT RULESETS!!!!

El miÃ, 08 de 09 de 2004 a las 12:54, Rocio Alfonso Pita escribiÃ:
> A lo que comentaba Matt Jonkman el MiÃrcoles, 8 de Septiembre de 2004 05:46:
> > The Bleeding snort project is better suited to handle the change load,
> > and so we're going to fork another set of rules called the
> > bleeding-virus ruleset. this will be handled just like the
> > bleeding-malware ruleset. It'll be a separate text file available direct
> > or via the tarballs we distribute.
>
> Hello,
>
>   A question about bleedingsnort rulesets: can I configure oinkmaster for 
> update 2 rulesets?
>
>   For example, If I configure in oinkmaster.conf this lines:
> url = http://www.snort.org/dl/rules/snortrules-snapshot-2_1.tar.gz
> url = http://www.bleedingsnort.com/bleeding.rules.tar.gz
>
>   what ruleset download? both? I think that only download the last URL, is 
> this correct?

You have to download both, then apply the snort.org rules and then the
bleeding rules. You need two oinkmaster configuration files, one for
each url, or two oinkmaster commands, one for each url.

>   Thakns and regards,
>      rozio
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_idP47&alloc_id808&opÃk
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
-- 
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÃA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_idP47&alloc_id808&opÌk
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs