[Snort-users] sid-msg.map

Joel Esler jesler at ...1935...
Tue Mar 19 10:05:53 EDT 2013

On Mar 14, 2013, at 2:31 PM, Johnny Venter <Johnny.Venter at ...15370...> wrote:

> Are the entries in "exploit-kit.rules" and "sid-msg.map" correct?  

You should be using the sid-msg.map file that pulledpork generates for you, not the one generated in the rule pack.  In fact, we should probably remove this file from the rule pack to avoid confusion.

Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130319/5a527935/attachment.html>

More information about the Snort-users mailing list