Snort mailing list archives
RE: Barnyard woes
From: "VanBrecht, Jason" <Jason.VanBrecht () ost dot gov>
Date: Tue, 25 May 2004 10:36:53 -0400
Make sure you add the sid's of your custom rules to the sid-msg.map. Jason Security Analyst -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of David Sent: Tuesday, May 25, 2004 8:54 AM To: snort-users () lists sourceforge net Subject: [Snort-users] Barnyard woes hey everybody, I was hoping somone could provide me with some insight... :) I have barnyard-0.1.0 installed and for some reason it inputs some alerts into my DB with the sig_name as "Snort Alert [1:2416:0]" where the 2416 is the sig_id. It only seems to do this for a small handful of the sigs, a lot of which are ones I have written myself. Has anyone seen this problem? Is this issue fixed in 0.2.0? I am trying to get this to work without upgrading if possible... TIA everyone, Dave Join Excite! - http://www.excite.com The most personalized portal on the Web! ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id149&alloc_id66&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Barnyard woes David (May 25)
- Re: Barnyard woes Dirk Geschke (May 25)
- Re: Barnyard woes Bamm Visscher (May 25)
- <Possible follow-ups>
- RE: Barnyard woes VanBrecht, Jason (May 25)
- Re: Barnyard woes David (May 26)