[Snort-users] Linking rules in BASE

Billy Marshall Billy.Marshall at ...9988...
Tue Aug 24 17:22:42 EDT 2010


I am not sure what you mean by a sim-link with BASE, I don't recall ever making any sim-links. However, the following is from the base_conf.php in your web directory. It defines the variables for BASE. (assuming your using a Linux distro and BASE 1.4.4) 
If you have moved your rules then the variable 'local_rules_dir' is not accurate. These also define the links in the output of BASE to correctly link to  websites.
 
$external_sig_link = array('bugtraq'   => array('http://www.securityfocus.com/bid/', ''),
/*********** corrected 20100104 Bill marshall*/
/*                           'snort'     => array('http://www.snort.org/pub-bin/sigs.cgi?sid=', ''),  */
                           'snort'     => array('http://www.snortid.com/snortid.asp?QueryId=', ''),
                           'cve'       => array('http://cve.mitre.org/cgi-bin/cvename.cgi?name=', ''),
                           'arachnids' => array('http://www.whitehats.com/info/ids', ''),
                           'mcafee'    => array('http://vil.nai.com/vil/content/v_', '.htm'),
                           'icat'      => array('http://icat.nist.gov/icat.cfm?cvename=CAN-', ''),
                           'nessus'    => array('http://www.nessus.org/plugins/index.php?view=single&id=', ''),
                           'url'       => array('http://', ''),
                           'local'     => array('signatures/', '.txt'),
                           'local_rules_dir' => array('rules/', '.rules'),
                           'EmThreats' => array('http://docs.emergingthreats.net/', ''));
 

/* Custom (user) PHP session handlers
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100824/ba2d4793/attachment.html>


More information about the Snort-users mailing list