[prev in list] [next in list] [prev in thread] [next in thread]
List: snort-sigs
Subject: Re: [Snort-sigs] Snort 2.8.6.0 rules available to registered and
From: Joel Esler <jesler () sourcefire ! com>
Date: 2010-05-13 15:39:56
Message-ID: AANLkTinSRrNcqSPnc8oC6O0MHfGvKUFJ06IrKoviZ8Nm () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
We were redirecting the URL links, but not the oinkcode portion. It's two
different parts of the site.
J
On Thu, May 13, 2010 at 11:35 AM, L0rd Ch0de1m0rt
<l0rdch0de1m0rt@gmail.com>wrote:
> LOL!
>
> On Thu, May 13, 2010 at 10:33 AM, Mike Ferguson <mikemikeferg@gmail.com>
> wrote:
> > Classic!
> >
> > On Thu, May 13, 2010 at 10:11 AM, Joel Esler <jesler@sourcefire.com>
> wrote:
> >>
> >> Seth,
> >> Yes, I had someone report that to me earlier. We are working on it.
> >> J
> >>
> >> On Thu, May 13, 2010 at 10:53 AM, Seth Art <sethsec@gmail.com> wrote:
> >>>
> >>> SF,
> >>>
> >>> I think the 2860_s rule pack is missing from:
> >>> http://www.snort.org/snort-rules/#rules. At least it is for me.
> >>>
> >>> Also when using the link that automatically inserts the oinkcode (nice
> >>> idea BTW) on this page: https://www.snort.org/account/oinkcode , the
> >>> 2860_s link doesn't work, but the 2853_s link does.
> >>>
> >>> Anyone else see the same thing?
> >>>
> >>> -Seth
> >>>
> >>> On Wed, May 12, 2010 at 12:28 PM, Joel Esler <jesler@sourcefire.com>
> >>> wrote:
> >>> > All,
> >>> > In light of the recent update to 2.8.6.0, we've been receiving a
> bunch
> >>> > of
> >>> > feedback surrounding the inability to use 2.8.5.3 Shared Object rules
> >>> > with
> >>> > the 2.8.6.0 codebase. I'm sure everyone that follows the lists have
> >>> > seen a
> >>> > bunch of emails recently about the segfaults people are receiving.
> >>> > Since we are interested in having as many people as we can move up to
> >>> > the
> >>> > new 2.8.6.0 codebase, what we've decided to do is release the 2.8.6.0
> >>> > rulepack to both the subscribers and the registered users at the same
> >>> > time.
> >>> > This one-time change in the VRT subscription model is so that
> everyone
> >>> > get
> >>> > on the current rulepack and upgrade to 2.8.6.0 with the correct
> >>> > rulepack.
> >>> >
> >>> > The way this works is the following:
> >>> > Registered users running 2.8.5.3
> >>> > You can now update to 2.8.6.0, download the current rulepack and run
> >>> > the
> >>> > latest 2.8.6.0 rules for the next 29 days (30 days from
> yesterday). If
> >>> > you
> >>> > wish to continue to receive the latest updates, you can of course
> >>> > subscribe here.
> >>> > Registered users running 2.8.5.3, not upgrading to 2.8.6.0
> >>> > You can continue to use the 2.8.5.3 rules, however, we will not be
> >>> > providing
> >>> > the SO rules that the subscribers get until about May 26th. (30 days
> >>> > after
> >>> > the rulepack change). So, essentially, there is no change for you.
> >>> > Subscribers using 2.8.5.3
> >>> > There is no change for you. Keep using your 2853_s url.
> >>> > Subscribers using 2.8.6.0
> >>> > There is no change for you. Keep using your 2860_s url.
> >>> > We are doing this, not only so people won't hesitate to update to
> >>> > 2.8.6.0,
> >>> > but also, because we believe its the right thing to do for our users.
> >>> > Please review the changes in the rulepack names and how to download
> >>> > them on
> >>> > the VRT Blog here.
> >>> > Thanks!
> >>> > Joel Esler
> >>> >
> >>> >
> ------------------------------------------------------------------------------
> >>> >
> >>> >
> >>> > _______________________________________________
> >>> > Snort-sigs mailing list
> >>> > Snort-sigs@lists.sourceforge.net
> >>> > https://lists.sourceforge.net/lists/listinfo/snort-sigs
> >>> >
> >>> >
> >>
> >>
> >>
> >>
> ------------------------------------------------------------------------------
> >>
> >>
> >> _______________________________________________
> >> Snort-sigs mailing list
> >> Snort-sigs@lists.sourceforge.net
> >> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> >>
> >
> >
> >
> ------------------------------------------------------------------------------
> >
> >
> > _______________________________________________
> > Snort-sigs mailing list
> > Snort-sigs@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/snort-sigs
> >
> >
>
[Attachment #5 (text/html)]
We were redirecting the URL links, but not the oinkcode portion. It's two \
different parts of the site.<div><br></div><div>J<br><br><div class="gmail_quote">On \
Thu, May 13, 2010 at 11:35 AM, L0rd Ch0de1m0rt <span dir="ltr"><<a \
href="mailto:l0rdch0de1m0rt@gmail.com">l0rdch0de1m0rt@gmail.com</a>></span> \
wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px \
#ccc solid;padding-left:1ex;">LOL!<br> <div><div></div><div class="h5"><br>
On Thu, May 13, 2010 at 10:33 AM, Mike Ferguson <<a \
href="mailto:mikemikeferg@gmail.com">mikemikeferg@gmail.com</a>> wrote:<br> > \
Classic!<br> ><br>
> On Thu, May 13, 2010 at 10:11 AM, Joel Esler <<a \
href="mailto:jesler@sourcefire.com">jesler@sourcefire.com</a>> wrote:<br> \
>><br> >> Seth,<br>
>> Yes, I had someone report that to me earlier. We are working on it.<br>
>> J<br>
>><br>
>> On Thu, May 13, 2010 at 10:53 AM, Seth Art <<a \
href="mailto:sethsec@gmail.com">sethsec@gmail.com</a>> wrote:<br> >>><br>
>>> SF,<br>
>>><br>
>>> I think the 2860_s rule pack is missing from:<br>
>>> <a href="http://www.snort.org/snort-rules/#rules" \
target="_blank">http://www.snort.org/snort-rules/#rules</a>. At least it is for \
me.<br> >>><br>
>>> Also when using the link that automatically inserts the oinkcode \
(nice<br> >>> idea BTW) on this page: <a \
href="https://www.snort.org/account/oinkcode" \
target="_blank">https://www.snort.org/account/oinkcode</a> , the<br> >>> \
2860_s link doesn't work, but the 2853_s link does.<br> >>><br>
>>> Anyone else see the same thing?<br>
>>><br>
>>> -Seth<br>
>>><br>
>>> On Wed, May 12, 2010 at 12:28 PM, Joel Esler <<a \
href="mailto:jesler@sourcefire.com">jesler@sourcefire.com</a>><br> >>> \
wrote:<br> >>> > All,<br>
>>> > In light of the recent update to 2.8.6.0, we've been receiving \
a bunch<br> >>> > of<br>
>>> > feedback surrounding the inability to use 2.8.5.3 Shared Object \
rules<br> >>> > with<br>
>>> > the 2.8.6.0 codebase. I'm sure everyone that follows the lists \
have<br> >>> > seen a<br>
>>> > bunch of emails recently about the segfaults people are \
receiving.<br> >>> > Since we are interested in having as many people as \
we can move up to<br> >>> > the<br>
>>> > new 2.8.6.0 codebase, what we've decided to do is release the \
2.8.6.0<br> >>> > rulepack to both the subscribers and the registered \
users at the same<br> >>> > time.<br>
>>> > This one-time change in the VRT subscription model is so that \
everyone<br> >>> > get<br>
>>> > on the current rulepack and upgrade to 2.8.6.0 with the correct<br>
>>> > rulepack.<br>
>>> ><br>
>>> > The way this works is the following:<br>
>>> > Registered users running 2.8.5.3<br>
>>> > You can now update to 2.8.6.0, download the current rulepack and \
run<br> >>> > the<br>
>>> > latest 2.8.6.0 rules for the next 29 days (30 days from yesterday). \
If<br> >>> > you<br>
>>> > wish to continue to receive the latest updates, you can of \
course<br> >>> > subscribe here.<br>
>>> > Registered users running 2.8.5.3, not upgrading to 2.8.6.0<br>
>>> > You can continue to use the 2.8.5.3 rules, however, we will not \
be<br> >>> > providing<br>
>>> > the SO rules that the subscribers get until about May 26th. (30 \
days<br> >>> > after<br>
>>> > the rulepack change). So, essentially, there is no change for \
you.<br> >>> > Subscribers using 2.8.5.3<br>
>>> > There is no change for you. Keep using your 2853_s url.<br>
>>> > Subscribers using 2.8.6.0<br>
>>> > There is no change for you. Keep using your 2860_s url.<br>
>>> > We are doing this, not only so people won't hesitate to update \
to<br> >>> > 2.8.6.0,<br>
>>> > but also, because we believe its the right thing to do for our \
users.<br> >>> > Please review the changes in the rulepack names and how \
to download<br> >>> > them on<br>
>>> > the VRT Blog here.<br>
>>> > Thanks!<br>
>>> > Joel Esler<br>
>>> ><br>
>>> > ------------------------------------------------------------------------------<br>
>>> ><br>
>>> ><br>
>>> > _______________________________________________<br>
>>> > Snort-sigs mailing list<br>
>>> > <a \
href="mailto:Snort-sigs@lists.sourceforge.net">Snort-sigs@lists.sourceforge.net</a><br>
>>> > <a href="https://lists.sourceforge.net/lists/listinfo/snort-sigs" \
target="_blank">https://lists.sourceforge.net/lists/listinfo/snort-sigs</a><br> \
>>> ><br> >>> ><br>
>><br>
>><br>
>><br>
>> ------------------------------------------------------------------------------<br>
>><br>
>><br>
>> _______________________________________________<br>
>> Snort-sigs mailing list<br>
>> <a href="mailto:Snort-sigs@lists.sourceforge.net">Snort-sigs@lists.sourceforge.net</a><br>
>> <a href="https://lists.sourceforge.net/lists/listinfo/snort-sigs" \
target="_blank">https://lists.sourceforge.net/lists/listinfo/snort-sigs</a><br> \
>><br> ><br>
><br>
> ------------------------------------------------------------------------------<br>
><br>
><br>
> _______________________________________________<br>
> Snort-sigs mailing list<br>
> <a href="mailto:Snort-sigs@lists.sourceforge.net">Snort-sigs@lists.sourceforge.net</a><br>
> <a href="https://lists.sourceforge.net/lists/listinfo/snort-sigs" \
target="_blank">https://lists.sourceforge.net/lists/listinfo/snort-sigs</a><br> \
><br> ><br>
</div></div></blockquote></div><br></div>
------------------------------------------------------------------------------
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic