Re: New to Splunk, need some help determining which tar.gz contains the latest rules.

"Brendan Bell \(brebell\) via Snort-sigs" <[email protected]>
Newsgroups gmane.comp.security.ids.snort.sigs
Message-ID <PH7PR11MB86001C3C72D6EB751CE88415B234A@PH7PR11MB8600.namprd11.prod.outlook.com>
Jeremie,

Welcome to Snort!

the most recent Snort3 rules are https://snort.org/downloads/subscriber/snortrules-snapshot-31470.tar.gz

Have you looked into light speed for Snort3?
Snort - Network Intrusion Detection &amp; Prevention System <https://snort.org/downloads/subscriber/snortrules-snapshot-31470.tar.gz>
Snort is an open-source, free and lightweight network intrusion detection system (NIDS) software for Linux and Windows to detect emerging threats.
snort.org




________________________________
From: Snort-sigs <[email protected]> on behalf of Jeremie Legault <[email protected]>
Sent: Thursday, July 13, 2023 11:39 AM
To: [email protected] <[email protected]>
Subject: Re: [Snort-sigs] New to Splunk, need some help determining which tar.gz contains the latest rules.

Sorry new to SNORT.
      Jeremie Legault
      Email - [email protected]<mailto:[email protected]>
      Direct Contact - 613-276-3585


On Thu, Jul 13, 2023 at 11:38 AM Jeremie Legault <[email protected]<mailto:[email protected]>> wrote:
I'm new to Splunk, trying to determine which rules download is the most current. I'd like to apply it to a new install.

I've subscribed, so I'm able to download the subscribed rules. My confusion is due to the lack of order on the rules download page.I assume the largest numerical value is the most recent release but due to the site which is listed in the order below I'm unsure. Could someone shed some light on this for me?

v3.0snortrules-snapshot-3100.tar.gz
snortrules-snapshot-3140.tar.gz
snortrules-snapshot-3031.tar.gz
snortrules-snapshot-3101.tar.gz
snortrules-snapshot-31110.tar.gz
snortrules-snapshot-31150.tar.gz
snortrules-snapshot-31440.tar.gz
snortrules-snapshot-31210.tar.gz
snortrules-snapshot-31350.tar.gz
snortrules-snapshot-31470.tar.gz
Talos_LightSPD.tar.gz
snortrules-snapshot-3000.tar.gz
snortrules-snapshot-31180.tar.gz
snortrules-snapshot-31200.tar.gz
snortrules-snapshot-3130.tar.gz
snortrules-snapshot-3150.tar.gz
snortrules-snapshot-3170.tar.gz
snortrules-snapshot-3190.tar.gz
snortrules-snapshot-3034.tar.gz
snortrules-snapshot-3110.tar.gz

      Jeremie Legault
      Email - [email protected]<mailto:[email protected]>
      Direct Contact - 613-276-3585

_______________________________________________
Snort-sigs mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.