[Snort-users] Pulledpork, multiple instances, and sid-msg.map

James Lay jlay at ...13475...
Wed Jul 24 17:35:43 EDT 2013


On 2013-07-24 15:29, JJ Cummings wrote:
> This is how I would do it...
>
> Sent from the iRoad
>
> On Jul 24, 2013, at 16:31, Eoin Miller
> <eoin.miller at ...14586...> wrote:
>

>>
>> Maintain a separate conf that has all rules enabled and just copy 
>> the
>> sid-msg.map file out of that?
>>
>> -- Eoin

Thanks for the responses all...looks like that'll be the way I do it.

James




More information about the Snort-users mailing list