[Snort-users] Pulledpork, multiple instances, and sid-msg.map

Eoin Miller eoin.miller at ...14586...
Wed Jul 24 16:31:08 EDT 2013


On 7/24/2013 20:23, James Lay wrote:
> Reposted from the pulled pork google group (no response)...anyone have 
> any hints? I've noticed that some rules aren't in my sid-msg.map.  I 
> have multiple snort.confs that have different rulesets enabled.  How can 
> I get pp to make the sid-msg.map with all the sig ID's?
> 
> Thank you.
> 
> James

Maintain a separate conf that has all rules enabled and just copy the
sid-msg.map file out of that?

-- Eoin





More information about the Snort-users mailing list