On Tue, Aug 26, 2003 at 12:24:11AM +0200, Sander Smeenk wrote: > This problem only exists for snort packages that aren't going to be > updated, like the ones that reach stable. The unstable package is up to > date enough to have all correct rules, imho. > > The other thing is, snort.org's people quickly start to drop old rule > formats when newer formats are used. Should I be the one that has to > convert every rule back to the old format to have stable users of snort > safe and sound? It'll take alot of time. And I believe it is not always > scriptable. > [...] > Well. Snort just fails to start if it can't parse the rule files. And > usually that is with every major upstream release. :(
You might consider talking with upstream about stability. What about users who have written their own rules? These simply break when a new version comes out? Why does the format need to change so frequently? -- - mdz
