RE: [Snort-users] Licensing

I assume, by "the rest", you mean the community rules? My understanding is
that the VRT rules are the ones produced and looked over by SF and released
with each major Snort version (Snort point x._._). Getting the newer
versions basically means you will have rules that are more current with
ongoing network/internet activities/vulnerable/worms/viruses that are out
there at that given time.

An example might be if virus.X comes out, new rules would be written and
released by VRT to detect it (possibly long) before a new major version of
Snort may be released.

I hope that helps clarify your question...if it doesn't please let me know
more specifically what your question is. Basically, it gives you advanced
detection capabilities...

--Lee

-----Original Message-----
From: snort-users-admin@lists.sourceforge.net
[mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Florin Andrei
Sent: Tuesday, March 08, 2005 12:15 AM
To: snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] Licensing

On Mon, 2005-03-07 at 21:53 -0500, Martin Roesch wrote:

> 3) VRT rules developed and QA'd at Sourcefire will be available for
> commercial redistribution if the commercial entity acquires a license
> from Sourcefire.

Can someone explain to a guy who used Snort long time ago but didn't
keep in touch - what are the VRT rules and how are they different from
the rest? I know they're QA'd by SF, i wonder from a practical
standpoint - what do they give me, a Snort user, that the other rules
don't?

--
Florin Andrei

http://florin.myip.org/



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users