RE: Updating Snort Signatures In Stable ? -- SNORT 1.9.0 for woody

2002-12-30 Thread Sébastien Desse
-security@lists.debian.org Objet : Re: Updating Snort Signatures In Stable ? On Tue, 2002-12-10 at 16:52, Matt Zimmerman wrote: On Tue, Dec 10, 2002 at 04:36:08PM -0200, Gustavo Franco wrote: No, you can't rebuild snort version from unstable. Who can't? You can't? I just did

Re: Updating Snort Signatures In Stable ? -- SNORT 1.9.0 for woody

2002-12-30 Thread Marcus Frings
* Sébastien Desse [EMAIL PROTECTED] wrote: I saw a lot of discution about snort 1.9 on woody. I just whant to tell that we do need the 1.9 ! why don't we use an another directory (like contrib) where we can put unstable softwares built for the stable distribution ? I would appreciate this,

Re: Updating Snort Signatures In Stable ?

2002-12-11 Thread Gustavo Franco
On Tue, 2002-12-10 at 16:52, Matt Zimmerman wrote: On Tue, Dec 10, 2002 at 04:36:08PM -0200, Gustavo Franco wrote: No, you can't rebuild snort version from unstable. Who can't? You can't? I just did, and it was not only possible, but easy. Nick Boyce! apt-get build-dep snort apt-get

Re: Updating Snort Signatures In Stable ?

2002-12-11 Thread Matt Zimmerman
On Wed, Dec 11, 2002 at 09:57:13AM -0200, Gustavo Franco wrote: On Tue, 2002-12-10 at 16:52, Matt Zimmerman wrote: On Tue, Dec 10, 2002 at 04:36:08PM -0200, Gustavo Franco wrote: No, you can't rebuild snort version from unstable. Who can't? You can't? I just did, and it was not

Re: Updating Snort Signatures In Stable ?

2002-12-11 Thread Matt Zimmerman
On Wed, Dec 11, 2002 at 01:43:48AM +, Nick Boyce wrote: On Tue, 10 Dec 2002 13:52:06 -0500, Matt Zimmerman wrote: [re: installing the snort binary from unstable] ... And I prefer not to install unstable glibc on my stable systems. Yeah - I thought there was a big problem with

Re: Updating Snort Signatures In Stable ?

2002-12-11 Thread Gustavo Franco
On Tue, 2002-12-10 at 16:52, Matt Zimmerman wrote: On Tue, Dec 10, 2002 at 04:36:08PM -0200, Gustavo Franco wrote: No, you can't rebuild snort version from unstable. Who can't? You can't? I just did, and it was not only possible, but easy. Nick Boyce! apt-get build-dep snort apt-get

Re: Updating Snort Signatures In Stable ?

2002-12-11 Thread Matt Zimmerman
On Wed, Dec 11, 2002 at 09:57:13AM -0200, Gustavo Franco wrote: On Tue, 2002-12-10 at 16:52, Matt Zimmerman wrote: On Tue, Dec 10, 2002 at 04:36:08PM -0200, Gustavo Franco wrote: No, you can't rebuild snort version from unstable. Who can't? You can't? I just did, and it was not

Re: Updating Snort Signatures In Stable ?

2002-12-10 Thread Gustavo Franco
On Fri, 2002-12-06 at 17:42, Matt Zimmerman wrote: On Thu, Dec 05, 2002 at 11:55:02PM -0500, Noah L. Meyerhans wrote: This has been discussed before. The thing is, I think that if you're serious about using snort, you should not even consider using the one in Debian. snort.org doesn't

Re: Updating Snort Signatures In Stable ?

2002-12-10 Thread Matt Zimmerman
On Tue, Dec 10, 2002 at 04:36:08PM -0200, Gustavo Franco wrote: No, you can't rebuild snort version from unstable. Who can't? You can't? I just did, and it was not only possible, but easy. apt-get build-dep snort apt-get source -b snort And the snort updates? Yes, they are built from the

Re: Updating Snort Signatures In Stable ?

2002-12-10 Thread Nick Boyce
On Tue, 10 Dec 2002 13:52:06 -0500, Matt Zimmerman wrote: [re: installing the snort binary from unstable] ... And I prefer not to install unstable glibc on my stable systems. Yeah - I thought there was a big problem with installing any unstable *binary* on a stable box, for exactly that reason.

Re: Updating Snort Signatures In Stable ?

2002-12-10 Thread Gustavo Franco
On Fri, 2002-12-06 at 17:42, Matt Zimmerman wrote: On Thu, Dec 05, 2002 at 11:55:02PM -0500, Noah L. Meyerhans wrote: This has been discussed before. The thing is, I think that if you're serious about using snort, you should not even consider using the one in Debian. snort.org doesn't

Re: Updating Snort Signatures In Stable ?

2002-12-10 Thread Matt Zimmerman
On Tue, Dec 10, 2002 at 04:36:08PM -0200, Gustavo Franco wrote: No, you can't rebuild snort version from unstable. Who can't? You can't? I just did, and it was not only possible, but easy. apt-get build-dep snort apt-get source -b snort And the snort updates? Yes, they are built from the

Re: Updating Snort Signatures In Stable ?

2002-12-09 Thread Javier Fernández-Sanguino Peña
On Mon, Dec 09, 2002 at 12:32:21AM +, Nick Boyce wrote: On Sat, Dec 07, 2002 at 02:46:01AM +, Nick Boyce wrote: I'd suggest maybe a note about V1.8.4 being useless should be added to http://packages.debian.org/stable/net/snort.html, along with some advice about getting signature

Re: Updating Snort Signatures In Stable ?

2002-12-09 Thread Javier Fernández-Sanguino Peña
On Mon, Dec 09, 2002 at 12:32:21AM +, Nick Boyce wrote: On Sat, Dec 07, 2002 at 02:46:01AM +, Nick Boyce wrote: I'd suggest maybe a note about V1.8.4 being useless should be added to http://packages.debian.org/stable/net/snort.html, along with some advice about getting signature

Re: Updating Snort Signatures In Stable ?

2002-12-08 Thread Nick Boyce
On Sat, 7 Dec 2002 13:51:11 +0100, Javier Fernández-Sanguino Peña wrote: On Sat, Dec 07, 2002 at 02:46:01AM +, Nick Boyce wrote: I'd suggest maybe a note about V1.8.4 being useless should be added to http://packages.debian.org/stable/net/snort.html, along with some advice about getting

Re: Updating Snort Signatures In Stable ?

2002-12-08 Thread Nick Boyce
On Sat, 7 Dec 2002 13:51:11 +0100, Javier Fernández-Sanguino Peña wrote: On Sat, Dec 07, 2002 at 02:46:01AM +, Nick Boyce wrote: I'd suggest maybe a note about V1.8.4 being useless should be added to http://packages.debian.org/stable/net/snort.html, along with some advice about getting

Re: Updating Snort Signatures In Stable ?

2002-12-07 Thread Noah L. Meyerhans
On Sat, Dec 07, 2002 at 01:51:11PM +0100, Javier Fern?ndez-Sanguino Pe?a wrote: IIRC important new versions of existing packages are allowed into point releases, so maybe Woody's main Snort engine binary packages can be updated when 3.0r1 happens. That won't happen sorry. That's

Re: Updating Snort Signatures In Stable ?

2002-12-07 Thread Javier Fernández-Sanguino Peña
On Sat, Dec 07, 2002 at 02:46:01AM +, Nick Boyce wrote: I'd suggest maybe a note about V1.8.4 being useless should be added to http://packages.debian.org/stable/net/snort.html, along with some advice about getting signature updates (i.e. roll your own). Why not file a bug? IIRC

Re: Updating Snort Signatures In Stable ?

2002-12-07 Thread Noah L. Meyerhans
On Sat, Dec 07, 2002 at 01:51:11PM +0100, Javier Fern?ndez-Sanguino Pe?a wrote: IIRC important new versions of existing packages are allowed into point releases, so maybe Woody's main Snort engine binary packages can be updated when 3.0r1 happens. That won't happen sorry. That's

Re: Updating Snort Signatures In Stable ?

2002-12-06 Thread Javier Fernández-Sanguino Peña
On Fri, Dec 06, 2002 at 04:18:52AM +, Nick Boyce wrote: If so, are there any special steps required to integrate such a download into our Debian Woody system ? Yes. See below. Alternatively, I note there are later signature packages in testing and unstable - can we use those

Re: Updating Snort Signatures In Stable ?

2002-12-06 Thread Kristof Goossens
On Fri, Dec 06, 2002 at 04:18:52AM +, Nick Boyce wrote: I searched the debian-security archive but didn't hit any items discussing this, so maybe it's a dumb question - sorry, I'm a newb here. Thanks for _any_ comments at all. Well, the version I am running at this time is Version 1.9.0

Re: Updating Snort Signatures In Stable ?

2002-12-06 Thread Matt Zimmerman
On Thu, Dec 05, 2002 at 11:55:02PM -0500, Noah L. Meyerhans wrote: This has been discussed before. The thing is, I think that if you're serious about using snort, you should not even consider using the one in Debian. snort.org doesn't even distribute up-to-date rules files for the version

Re: Updating Snort Signatures In Stable ?

2002-12-06 Thread Nick Boyce
On Fri, 06 Dec 2002 04:18:52 +, I wrote: I've been running Snort for a month or so now on a Woody box at work, and am now wondering whether the Debian Project (or packager) has a Plan for providing signature file updates to users of the stable distribution. Well thanks for the answers folks

Re: Updating Snort Signatures In Stable ?

2002-12-06 Thread Javier Fernández-Sanguino Peña
On Fri, Dec 06, 2002 at 04:18:52AM +, Nick Boyce wrote: If so, are there any special steps required to integrate such a download into our Debian Woody system ? Yes. See below. Alternatively, I note there are later signature packages in testing and unstable - can we use those

Re: Updating Snort Signatures In Stable ?

2002-12-06 Thread Matt Zimmerman
On Thu, Dec 05, 2002 at 11:55:02PM -0500, Noah L. Meyerhans wrote: This has been discussed before. The thing is, I think that if you're serious about using snort, you should not even consider using the one in Debian. snort.org doesn't even distribute up-to-date rules files for the version

Re: Updating Snort Signatures In Stable ?

2002-12-06 Thread Nick Boyce
On Fri, 06 Dec 2002 04:18:52 +, I wrote: I've been running Snort for a month or so now on a Woody box at work, and am now wondering whether the Debian Project (or packager) has a Plan for providing signature file updates to users of the stable distribution. Well thanks for the answers folks

Updating Snort Signatures In Stable ?

2002-12-05 Thread Nick Boyce
I've been running Snort for a month or so now on a Woody box at work, and am now wondering whether the Debian Project (or packager) has a Plan for providing signature file updates to users of the stable distribution. The snort-rules-default package available in stable never gets updated - nor

Re: Updating Snort Signatures In Stable ?

2002-12-05 Thread Noah L. Meyerhans
On Fri, Dec 06, 2002 at 04:18:52AM +, Nick Boyce wrote: I've been running Snort for a month or so now on a Woody box at work, and am now wondering whether the Debian Project (or packager) has a Plan for providing signature file updates to users of the stable distribution. This has been

Updating Snort Signatures In Stable ?

2002-12-05 Thread Nick Boyce
I've been running Snort for a month or so now on a Woody box at work, and am now wondering whether the Debian Project (or packager) has a Plan for providing signature file updates to users of the stable distribution. The snort-rules-default package available in stable never gets updated - nor

Re: Updating Snort Signatures In Stable ?

2002-12-05 Thread Noah L. Meyerhans
On Fri, Dec 06, 2002 at 04:18:52AM +, Nick Boyce wrote: I've been running Snort for a month or so now on a Woody box at work, and am now wondering whether the Debian Project (or packager) has a Plan for providing signature file updates to users of the stable distribution. This has been