Slashdot Mirror

← Back to Stories (view on slashdot.org)

New Location For (Bleeding-Edge) Snort Sigs

Posted by timothy on from the because-malware-sucks dept.

Vantage writes "A few of us have gotten together and built a snort 'signature repository.' ... This is a place for everyone to post their personal and company-made signatures and to take a look at and use those submitted by others. It is by no means a replacement for the snort.org signature base, but it will help to get signatures out there for brand new vulnerabilities. We are hoping that those snort users in the /. community will add there sigs to this database. We are looking to add any and all signatures herem so please feel free to post all of your sigs."

4 of 26 comments (clear)

  1. Systems by Vantage · · Score: 4, Informative

    Well we are working on other options this seamed like the easiest and fastest way to get the idea off the ground... Does anyone have any software suggestions... Other than slashcode?? We are looking at CVS....

    1. Re:Systems by jrexilius · · Score: 2, Informative

      One of the earlier posts had a few suggestions that may have been worthwhile that would require a bit of customization.

      What, in addition to public access to shared sigs, are you really trying to get at? Would a moderation/voting/popularity function be desired, a wiki-style public read/write forum where they could evolve, better search and classification capabilities, etc.?

      By the way, its not a bad idea, but it would have helped to be more descriptive in your vision for it and maybe better tool selection.

      If you would like I have a generic PHP framework and database interaction page that you could use, the real issue would be the schema and then the search/browse/vote/classify UI.

  2. Re:What the fuck is a 'snort'? by illuvata · · Score: 2, Informative

    The Open Source Network Intrusion Detection System

  3. Re:What the fuck is a 'snort'? by isorox · · Score: 2, Informative

    You're thinking of Snarf