[Snort-users] Help with Alerts
wkitty42 at ...14940...
Sat Sep 8 20:31:59 EDT 2012
On 9/8/2012 07:53, Joel Esler wrote:
> If you are using pulledpork, it should generate your Sid-MSG.map for you. Are
> you using pulledpork?
and if you are not using pulledpork, there is a tool in the utilities area for
this... at least there was in the older versions of snort... i guess it is still
create-sidmap.pl /path/to/rules > /path/to/sidmap/sid-msg.map
More information about the Snort-users