[Snort-users] sid-msg.map and the new .rules files

Joel Esler jesler at ...1935...
Wed Oct 31 12:53:26 EDT 2012


On Oct 31, 2012, at 12:33 PM, JJC <cummingsj at ...11827...> wrote:

> sid-msg.map or gen-msg.map? the subject indicates one, while the body indicates the other.. that said sid-msg.map seems to make the most sense.
> 
> Joel, correct me if I'm wrong but I believe that the expectation is that users generate their own sid-msg.map going forward, this guarantees that local.rules etc.. are included in said sid-msg.map.  PulledPork natively does this, and Oinkmaster includes a contrib script that does this.

You are correct.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20121031/32e63c6a/attachment.html>


More information about the Snort-users mailing list