[Snort-users] Help with Alerts
jlay at ...13475...
Sun Sep 9 09:09:50 EDT 2012
On Sep 8, 2012, at 6:31 PM, waldo kitty <wkitty42 at ...14940...> wrote:
> On 9/8/2012 07:53, Joel Esler wrote:
>> If you are using pulledpork, it should generate your Sid-MSG.map for you. Are
>> you using pulledpork?
> and if you are not using pulledpork, there is a tool in the utilities area for
> this... at least there was in the older versions of snort... i guess it is still
> create-sidmap.pl /path/to/rules > /path/to/sidmap/sid-msg.map
Actually I think that's part of oinkmaster :)
More information about the Snort-users