Download Rules
Snort rule packages for Subscribers and Registered users track the
latest feature set for any Major.X release. This means that rule
packages can contain features that only exist in the latest version of
snort for a given Major.X release. A simple example is:
If 2.6.1.5 is the current version of snort then the
snortrules-snapshot-2.6 packages might utilize features not supported in
2.6.1.4 and earlier.
Additionally the word CURRENT does not mean "current" as in the English
dictionary meaning. It mean CURRENT in the BSD source code repository
meaning. CURRENT tracks SNORT CVS CURRENT, i.e. the the unstable, possibly
broken version of snort. If you download CURRENT and are not running
this version of snort, your snort install will break.
Download Policy: Please note that you may only download each file once every 15 minutes. Please set your cron jobs to run no more than once per hour. VRT Subscribers are currently exempt from this policy.
|
|
Sourcefire VRT Certified Rules - The Official Snort Ruleset (subscription release)
|
|
These rules are available to subscribers only until Thursday, January 22nd 2009
The Sourcefire VRT has added multiple rules in the web-activex, specific-threats, web-client and exploit categories to provide coverage for emerging threats from these technologies.
view advisory | view changelog.
|
|
|
|
Sourcefire VRT Certified Rules - The Official Snort Ruleset (registered user release)
|
The Sourcefire Vulnerability Research Team (VRT) has discovered a serious vulnerability affecting Microsoft Outlook and is aware of a vulnerability affecting Adobe Acrobat Reader.
view advisory | view changelog
|
|
|
|
Sourcefire VRT Certified Rules - The Official Snort Ruleset (unregistered user release)
|
These VRT Certified rulesets were released on 7/27/05 and contain all the rules released prior to the VRT License change. It is recommended that these rulesets are not used as they are only provided to meet the requirements of the original rules license.
|
|
|
|
Community Rules
|
|
The Community Rulesets contain rules submitted by members of the
open source community. While these rules are available as is, the
VRT performs basic tests to ensure that new rules will not break Snort.
These rules are distributed under the
GPL
and are freely available to all open source Snort users.
|
|
|
|
Sourcefire VRT Certified Rules are the official rules of snort.org. Each rule has been rigorously tested against the same standards the VRT uses for Sourcefire customers.
|
|
