cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
547
Views
0
Helpful
3
Replies

IDS sig-3.1.1S23 size???

seth.leone
Level 1
Level 1

is there any partciular reason that a 1 signature update (cachefs) for 3.1.1-sig-S23 is 5mb???

The readme says there is no other signatures, updates, or resolved sigs

3 Replies 3

marcabal
Cisco Employee
Cisco Employee

The 3.1(1) Signature Updates for the sensor will now also be including the NSDB, a signature update for IEV, and some file updates for IDM for the new sigs.

It is, therefore, significantly larger than previous signature updates.

klwiley
Cisco Employee
Cisco Employee

3.1 signature updates include the appropriate files to update both the IDM and IEV. The prior updates did not require these additional files so were much smaller.

Is it possible and planed to release new signatures without IDM and IEV updates? If you release updates onth a month I think updates about 500 KB up to 1 MB should be ok but 5 MB?

Just for your info: we don't want to run the new services on our sensors and will disable them until 3.1.1 is rereleased.