Download from nagios.com or Sourceforge, difference?

[lstrm]

I noticed that downloading nagios-4.1.1.tar.gz from either assets.nagios.com (the official download link) or from Sourceforge results in two not identical files.

sha1sum 26723ebb228d6d360626b3bae6789c362f941f1d nagios-4.1.1.tar.gz (this one is from assets.nagios.com

sha1sum f8d52a1e1b6f5c547ebdc245946d8fba244824ba fromsf/nagios-4.1.1.tar.gz (this one is from sourceforge)

Why is there a difference, and does it matter which one I use?

[hsmith]

I would only trust the link from our page. We used to use SourceForge, but we switched to GitHub. The version on Sourceforge may have not have the latest bugfixes and whatnot, resulting in a different checksum. My official answer though would be GitHub --> Our Website --> Sourceforge in order of where I am most likely to want to get the files from. I only put GitHub first, because that is where the source code is.