Quoting zahra taghikhaki <physicminister@yahoo.com>:
hi
i installed snort with default rules .i want to update
and use new snort rules .
how can i do it?
where can i find rules that describe new worms ?
Downloading the rules is easy. You should use two main sources:
www.bleedingsnort.org and www.snort.org.
For the bleeding snort rules, use this URL:
http://www.bleedingsnort.com/bleeding-all.rules
OK. Now the easy part is over.
You should use a rule management system of some kind. Lots of people
have written their own, but oinkmaster seems to be the most frequently
referenced. Get oinkmaster here: http://oinkmaster.sourceforge.net/
Without a rule management system of some kind, you will not like snort.
To download signatures from snort.org, you should visit their site.
They have a fantastically confusing way of describing their offerings.
I will not repeat it here. If you register with snort.org and get an
"oinkcode" then you oinkmaster installation will seamlessly pick up the
snort.org sigs.
hope this gets you started.
jp
-------------------------------------------------
Email solutions, MS Exchange alternatives and extrication,
security services, systems integration.
Contact: services@doctorunix.com
-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
