| Main Archive Page > Month Archives > snort-users archives |
[Snort-users] Recent errors on Snort.org and how you can help
From: Mike Guiterman <mguiterman_at_nospam>Date: Tue May 19 2009 - 16:19:44 GMT
To: snort-users@lists.sourceforge.net
Hi everyone,
Many of you have reported some problems logging in to or downloading rules from Snort.org recently. The recurring problem the site is experiencing is related to the volume of downloads of VRT rules update files we're seeing recently. We've got two initiatives under way to solve this problem relatively soon.
- First the VRT is working to greatly reduce the size of the rules files. You can expect to see improvement in the next two weeks.
- The second initiative is the release of the new Snort.org site which uses an entirely new infrastructure. The new site is scheduled to go live the middle of next week but more on that in a note later this week.
You may be asking your self "how can I help". In the short term the best thing each of you can do is look at your Oinkmaster.conf and update it to download rules files no more than once or twice per day. As you all know the VRT releases rules updates, on average about every two weeks and at most weekly. We're seeing many sensors downloading rules files every minute. One Oinkcode has downloaded the same rules file 22,000 times in a single day.
We know that having the most up to date rules is very important to everyone, that said downloading the file every minute is a bit excessive. If everyone could reduce their download frequency to something a bit more reasonable, it will make the site and rules updates much more accessible to everyone until we move to the new site.
Thanks for you help.
Mike
__
Mike Guiterman
Snort Community Manager
Sourcefire, Inc.
mguiterman@sourcefire.com
Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users