Network Security

Question 15

How is Snort updated - in purely technical and administrative terms?

Two things need to be kept updated:

  1. the program itself - there are three versions officially available for download: 2.1.3, 2.2.0 og 2.3.2 (status as of 15/4-2005). No further development is expected - baring possibly security updates - on the 2.1.x and 2.2.x versions, so these can be regarded as very stable releases.
  2. the rules - you can download these for free in version optimised for each of the three program releases. But you can also either be a customer with the firm developing Snort or subscribe to the rulesets thus gaining access to these faster. Of course, the 2.1.x and 2.2.x brances will not be able to make use of rules that are dependent on features of later versions.