Re: [sentinix-list] Snortcenter: Snort Rules Updates:

I don't remember the exact file I changed, I think it was snortcenter's
config.php file, but basically all I had to do was change the filename
from snortwhatever.tar.gz to snort-newname.tar.gz Find the entry in the
file and put the url into mozilla (or whatever you use) and see what the
proper filename is. I am away from my system otherwise I would tell you
exactly what it is.

When I did update it spilled some error's about being confused by some
of the rule's, but in the end it did update them. And the system seems
to be running fine. One thing I didn't like was that it reset my
HOME_NET and EXTERNAL_NET variables back to any, so I had a million
alerts before I knew what happened.

-Chris Locke
http://stageofbattle.org

On Mon, 2004-04-05 at 14:52, M. Morgan wrote:
> Hello all,
>  While trying update Snort Rules via the Internet in Snortcenter I get the error "No Update This Time", after some "googling" I found references to a syntax error between the "new" Snort rules format at snort.org and Snortcenter since the newest Snort release... (or something along those lines).
> 
>  Does anyone have information regarding this issue and/or a possible solution?
> 
> Your input is appreciated.
> 
> Thanks,
> Michael
> 
> btw: I posted this question to the snort list as well and will flip the resolution (if any) back on here if/when I find it.
> _______________________________________________
> SENTINIX mailing list
> [email protected]
> http://elevenprospect.com/mailman/listinfo/sentinix