On Sun, Aug 24, 2003 at 10:02:02PM -0400, Noah L. Meyerhans wrote: > > I can think off-hand of at least one other security related tool that > needs frequent updating of a ruleset: nessus. It is an active probing > tool that scans a network for vulnerable systems. If it doesn't have a > current set of rules, it may fail to identify vulnerable systems, > leading to the same issues that snort has.
But nessus does provide a tool to download latest plugins (nessus-update-plugins) which provides a way to update regardless of your version (although some plugins might not work in older releases). Snort does not provide anything similar. Regards Javi
pgp7bNn614zHm.pgp
Description: PGP signature