snortrules-snapshot-29120.tar.gz规则集

CISCO SNORT SUBSCRIBER RULES LICENSE AGREEMENT (v. 3.1) IMPORTANT: PLEASE READ THIS AGREEMENT CAREFULLY. THIS SNORT SUBSCRIBER RULES LICENSE AGREEMENT IS A LEGAL AGREEMENT BETWEEN YOU AND CISCO SYTEMS, INC. OR ONE OF ITS DESIGNATED SUBSIDIARIES LICENSING THE RULES TO YOU HEREUNDER INSTEAD OF CISCO SYSTEMS, INC. “CISCO”). THE TERMS AND CONDITIONS UNDER WHICH YOU MAY USE THE RULES ARE SET FORTH IN THIS SNORT SUBSCRIBER RULES LICENSE AGREEMENT (“AGREEMENT”). BY DOWNLOADING, INSTALLING OR USING ANY OF THE RULES, YOU ARE BINDING YOURSELF IF YOU ARE ACTING IN YOUR PERSONAL CAPACITY OR THE BUSINESS ENTITY THAT YOU REPRESENT (AS APPLICABLE, “YOU”) TO THIS AGREEMENT AND AGREEING THAT THIS AGREEMENT WITH CISCO IS ENFORCEABLE LIKE ANY WRITTEN CONTRACT SIGNED BY YOU. IF YOU DO NOT AGREE TO ALL OF THE TERMS AND CONDITIONS CONTAINED IN THIS AGREEMENT, THEN CISCO IS UNWILLING TO LICENSE THE RULES TO YOU, IN WHICH CASE YOU MAY NOT DOWNLOAD, INSTALL OR USE ANY OF THE RULES. IF YOU DO NOT AGREE TO THE TERMS AND CONDITIONS OF THIS AGREEMENT, DO NOT DOWNLOAD, INSTALL OR USE THE RULES. BY SELECTING “I ACCEPT,” “OK,” “CONTINUE,” “YES,” “NEXT” OR BY INSTALLING OR USING THE RULES IN ANY WAY, YOU ARE INDICATING YOUR COMPLETE UNDERSTANDING AND ACCEPTANCE OF ALL OF THE TERMS AND CONDITIONS OF THIS AGREEMENT. 1. Definitions 1.1 “Commercial Purpose” means the direct or indirect use, reproduction or distribution of any Rule, Modification or Compilation, in whole or in part, that is intended to result in financial gain, economic benefit or other form of consideration to any person or entity involved in such use, reproduction or distribution. Examples of a Commercial Purpose include but are not limited to: (a) integrating the Rules with other software or hardware for sale as a bundled product; (b) licensing, distributing or selling the Rules for a fee; or (c) using the Rules to provide a fee-based service or subscription. 1.2. “Community Rules” means specifically formulated network traffic characteristics and instructions in text form, source code form or object code form (including the structure, sequence, organization and syntax of such network traffic characteristics), and all documentation related thereto, that: (a) are owned by Cisco and designated with SIDs of 3,464 and below; or (b) have been developed by a third party and approved by Cisco Talos (Cisco’s vulnerability research team or successor group within Cisco). 1.3 “Compilation” means a work that combines the Rules or any Modification or portions thereof with any services, programs, code or other products not governed by the terms of this Agreement. 1.4. “Improvements” means a Modification to a Rule (or to a Modified Rule) that corrects a bug, defect, or error in such Rule without affecting the overall functionality of such Rule. 1.5. “Limited Ruleset” means those Rules that have been expressly designated by Cisco Talos as “Limited Ruleset”, and are tagged or otherwise identified as “ruleset limited” in the ruleset. 1.6. “Modifications” or “Modified” means any alteration, addition to or deletion from the substance or structure of the Rules (or to a Modified Rule) including, without limitation: (a) an Improvement; (b) any change to the contents of a file containing a Rule or a Modification; (c) any derivative of the Rule or of any Modified Rule; or (d) any new file that contains any part of the Rule or Modified Rule. 1.7. “Registered User” means an individual or entity who has registered on www.snort.org to use the Rules and who is not required to pay a license fee for such use. 1.8. “Rules” means specifically formulated network traffic characteristics and instructions in text form, source code form or object code form (including the structure, sequence, organization and syntax of such network traffic characteristics), and all documentation related thereto, that: (a) have been created, developed, tested and officially approved by Cisco Talos; and (b) are designated with SIDs between 3,465 and 1,000,000. Modifications are considered part of the Rules, however, the Community Rules are not considered part of the Rules definition. The “Limited Ruleset” is considered part of the Rules and subject to additional licensing limitations set forth in this Agreement. 1.9. “Sensor” means any hardware or virtual device that runs at least one detection engine such as Snort. 1.10. “Subscriber” means an individual or entity who has registered on www.snort.org to use the Rules as a subscriber and who has paid the applicable license fee for such use. 2. License Grant 2.1. Subscriber Use. If You are a Subscriber, then subject to the terms and conditions of this Agreement, Cisco grants You a world-wide and non-exclusive license to: (a) download, install and use the Rules only on that number of Sensors for which You have paid the applicable license fee; (b) Modify the Rules and install and use those Modified Rules consistent with Section 2.1 (a) above; (c) reproduce the Rules as strictly necessary in exercising Your rights under this Section 2.1; and (d) make the Rules and any Modification available to Your consultants, agents and subcontractors for the limited purpose of exercising Your rights under this Section 2.1 provided that such use is in compliance with this Agreement. As a Subscriber You will have access to the Rules promptly upon release by Cisco and thirty (30) days before new Rules are made available to Registered Users. Once a Rule (excluding the Limited Ruleset) has been made available to Registered Users (i.e. 30 days after release to Subscribers), You may then also distribute such Rule or any Modification in accordance with Section 2.2 (c) and Section 2.2 (d) below, as applicable. As a Subscriber You may not distribute new Rules until such 30-day period has lapsed. Notwithstanding the foregoing, under no circumstances may You distribute the Limited Ruleset, or any portion thereof, to a Registered User or to any third party or otherwise make the Limited Ruleset available to any third party or allow a third party to use the Limited Ruleset. 2.2. Use by Registered Users. If You are a Registered User, then subject to the terms and conditions of this Agreement, Cisco grants You a world-wide and non-exclusive license to: (a) download, install and use the Rules on Sensors that You manage (or over which You have administrative control); (b) Modify the Rules and use such Modifications consistent with Section 2.2(a) above; (c) distribute those Rules and any Modifications that are made generally available to other Registered Users; (d) distribute any Improvement made generally available to other Registered Users on mailing lists commonly used by the Snort user community as a whole; (e) reproduce the Rules as strictly necessary in exercising the rights under this Section 2.2; and (f) make the Rules and any Modification available to Your consultants, agents and subcontractors for the limited purpose of exercising Your rights under this Section 2.2 provided that such use is in compliance with this Agreement. If You are a Registered User, You acknowledge and agree that new Rules (excluding the Limited Ruleset) will only be made available to Registered Users thirty (30) days after they have been released to Subscribers. You will have access to Modifications promptly upon release by Cisco at the same time they are made available to Subscribers. Notwithstanding the foregoing, as a Registered User, You have no right or license under this Agreement to use,