[Snort-users] Pulledpork, multiple instances, and sid-msg.map
jlay at ...13475...
Wed Jul 24 17:35:43 EDT 2013
On 2013-07-24 15:29, JJ Cummings wrote:
> This is how I would do it...
> Sent from the iRoad
> On Jul 24, 2013, at 16:31, Eoin Miller
> <eoin.miller at ...14586...> wrote:
>> Maintain a separate conf that has all rules enabled and just copy
>> sid-msg.map file out of that?
>> -- Eoin
Thanks for the responses all...looks like that'll be the way I do it.
More information about the Snort-users