[Snort-devel] where find new gen-msg.map?

Michael Scheidell scheidell at ...1197...
Thu May 30 12:23:17 EDT 2002


> Michael Scheidell wrote:
> > Barnyard note for beta6 said gen-msg.map was in snort distribution.
> > (and its not in barnyard dist..)
> > 
> > there are new things in snort 1.8.7 beta5, and the missing gen-msg.map is
> > needed.
> 
> My mistake.  gen-msg.map is not in the 1.8.X distributions (it *has* 
> been added to 1.9).  You can get a copy of gen-msg.map for Snort 1.8.7 
> at:  http://www.snort.org/dl/barnyard/gen-msg.map

Thanks for the reply, but its missing a lot of stuff, best I can tell.

that gen-msg.map you pointer me to is what I got off the barnyard csv
(older one) and is missing at least:

generator: 111

id 14-18

snip:
111 || 8 || spp_stream4: FIN Stealth Scan
111 || 9 || spp_stream4: NULL Stealth Scan
111 || 10 || spp_stream4: NMAP XMAS Stealth Scan
111 || 11 || spp_stream4: VECNA Stealth Scan
111 || 12 || spp_stream4: NMAP Fingerprint Stateful Detection
111 || 13 || spp_stream4: SYN FIN Stealth Scan

> 
> -A
> 
> 

-- 
Michael Scheidell
SECNAP Network Security, LLC
(561) 368-9561 scheidell at ...1197...
http://www.secnap.net/





More information about the Snort-devel mailing list