[Snort-users] snort 2.8.6.1 / barnyard2 2-1.8 (unified2) problem

Nigel Houghton nhoughton at ...1935...
Fri Aug 27 11:02:00 EDT 2010


On Fri, 27 Aug 2010 10:42:07 -0400, Lawrence R. Hughes, Sr. wrote:
> JJ,
>  
> The sid-msg.map is the one downloaded with new rules, don't they 
> update that file?

No, we do not. This is something that has to be generated for your 
environment, that way you can include all of the other rules you have 
and it will include the rules written specifically for your environment.

--
Nigel Houghton
Head Mentalist
SF VRT Department of Intelligence Excellence
http://vrt-sourcefire.blogspot.com && http://labs.snort.org/




More information about the Snort-users mailing list