[Snort-users] Help with Alerts

James Lay jlay at ...13475...
Sun Sep 9 09:09:50 EDT 2012


On Sep 8, 2012, at 6:31 PM, waldo kitty <wkitty42 at ...14940...> wrote:

> On 9/8/2012 07:53, Joel Esler wrote:
>> If you are using pulledpork, it should generate your Sid-MSG.map for you. Are
>> you using pulledpork?
> 
> and if you are not using pulledpork, there is a tool in the utilities area for 
> this... at least there was in the older versions of snort... i guess it is still 
> there?
> 
>  create-sidmap.pl /path/to/rules > /path/to/sidmap/sid-msg.map
> 
> 

Actually I think that's part of oinkmaster :)

James





More information about the Snort-users mailing list