snort-users May 2009 archive
Main Archive Page > Month Archives  > snort-users archives
snort-users: Re: [Snort-users] snortrules-snapshot not sustainab

Re: [Snort-users] snortrules-snapshot not sustainable?

From: Zultan <zultan_at_nospam>
Date: Wed May 06 2009 - 10:48:14 GMT
To: "Jason Haar" <>, "'Snort'" <>

> ----- Original Message -----
> From: "Jason Haar" <>
> Hi there
> Has anyone looked at the size of that tar file? 94M! From New Zealand
> it's taking 10-15 minutes to download, and I only want ~4M of it.
> Surely this screams out for separation.
> snortrules-snapshot-$VERSION-$DISTRO-$ARCH.tar.gz springs to mind?
> Better yet, split the rules back into their original standalone tar, and
> put the "binary" stuff in other per-distro containers?
> Rsync would be better of course :-)

Rsync would be better, except for users like me. Why? Because politicians far above me with their lofty CISSP decided that rsync might be abused. So they ordered port 873 blocked.

A simpler solution would be to reduce the size of the tarball.

Hello VRT rules folks!

Since the rules .tgz file for rules >= version 2.8.4 will not work on lessor versions, why are the precompiled rules for lessor still included in the tarball?

If the rules for < 2.8.4 will not be maintained, then why not fork off the 2.8.4 rules and only include the precompiled rules for 2.8.4+?

Z -- Be Yourself @! Choose From 200+ Email Addresses Get a Free Account at ------------------------------------------------------------------------------ The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your production scanning environment may not be a perfect world - but thanks to Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700 Series Scanner you'll get full speed at 300 dpi even with all image processing features enabled. _______________________________________________ Snort-users mailing list Go to this URL to change user options or unsubscribe: Snort-users list archive: