[Snort-users] Help with Alerts

waldo kitty wkitty42 at ...14940...
Sat Sep 8 20:31:59 EDT 2012


On 9/8/2012 07:53, Joel Esler wrote:
> If you are using pulledpork, it should generate your Sid-MSG.map for you. Are
> you using pulledpork?

and if you are not using pulledpork, there is a tool in the utilities area for 
this... at least there was in the older versions of snort... i guess it is still 
there?

  create-sidmap.pl /path/to/rules > /path/to/sidmap/sid-msg.map





More information about the Snort-users mailing list