[Snort-users] Snort and creating new classtypes
Matthew.Wagenknecht at ...6755...
Thu Aug 29 09:24:05 EDT 2002
In the snort rules, a number of virus rules have misc-activity. I want to
move all virus signatures to a new classtype called virus. I created a new
line in classifications.config like the following::
config classification: virus,Virus Detection,1
However when in ACID, it shows up under unclassified. Is there something
else I need to do or is this and ACID issue?
..:: Matt ::..
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users