Re: Snort Rules - Version Not Listed

"Vitalii Serhiiovych Horbatov -X \(vhorbato - SOFTSERVE INC at Cisco\) via Snort-users" <[email protected]> Thu, 1 Aug 2024 13:04:23 +0000
Newsgroups gmane.comp.security.ids.snort.general
Message-ID <MW4PR11MB829088A3F546F206AD7F50C3DBB22@MW4PR11MB8290.namprd11.prod.outlook.com>
Hi Justin!

We don’t have a snapshot for 3.3.1.0, since rules version number change is tied to our internal API version change. You can just pick latest one available on a snort.org (snortrules-snapshot-3200.tar.gz in this case).
Just in case, I’ll also note that you need to add an oinkcode at the end of the URL. You can get a code by registering on snort.org and copying it from “My Account” -> “Oinkcode” page.

Thanks!

From: Snort-users <[email protected]> on behalf of Justin Chin-You via Snort-users <[email protected]>
Date: Wednesday, 31 July 2024 at 17:38
To: [email protected] <[email protected]>
Subject: [Snort-users] Snort Rules - Version Not Listed

Hi All,



Hoping someone might be able to guide me a little.



I just built Snort and pulled version 3.3.1.0 from Git. I've gotten to the part where I get to pull my updates, per the rules download page my URL should be formatted:

https://www.snort.org/rules/snortrules-snapshot-<version>.tar.gz.md5?oinkcode=<oinkcode><https://www.snort.org/rules/snortrules-snapshot-%3cversion%3e.tar.gz.md5?oinkcode=%3coinkcode%3e>



I was expecting this to work:

https://www.snort.org/rules/snortrules-snapshot-3310.tar.gz.md5?oinkcode=<https://www.snort.org/rules/snortrules-snapshot-3310.tar.gz.md5?oinkcode=%3ccode%3e>



However, this definitely doesn't work. Anyway I can determine what version of the rulesets I need for my specific version of Snort?



Thanks!

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette