[Snort-users] Pulledpork, multiple instances, and sid-msg.map
eoin.miller at ...14586...
Wed Jul 24 16:31:08 EDT 2013
On 7/24/2013 20:23, James Lay wrote:
> Reposted from the pulled pork google group (no response)...anyone have
> any hints? I've noticed that some rules aren't in my sid-msg.map. I
> have multiple snort.confs that have different rulesets enabled. How can
> I get pp to make the sid-msg.map with all the sig ID's?
> Thank you.
Maintain a separate conf that has all rules enabled and just copy the
sid-msg.map file out of that?
More information about the Snort-users