[Snort-users] darpa dataset problem(zero alert)

waldo kitty wkitty42 at ...14940...
Tue Aug 19 19:54:26 EDT 2014


On 8/19/2014 6:29 PM, Joel Esler (jesler) wrote:
> That is from the ruleset that is available at www.snort.org/downloads

and just to expand on joel's reply, GID:1 are snort's textual rules... the 
shared object rules are GID:3... gen-msg.map will tell you the others... 
including those generated by internal snort modules...

-- 
  NOTE: No off-list assistance is given without prior approval.
        Please *keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.




More information about the Snort-users mailing list