Snort mailing list archives
Re: Pulled Pork Question
From: Y M <snort () outlook com>
Date: Thu, 11 Jul 2013 20:41:12 +0300
From this blog post http://blog.snort.org/2013/04/barnyard2-2-113-beta-is-now-available.html?m=1
"sig-msg.map version 2 format extend the information already present in the sid-msg.map file created from rules. This new format version allow signature pre-population if users are using output database method with barnyard2 2-1.13 and above." ________________________________ From: waldo kitty<mailto:wkitty42 () windstream net> Sent: 7/11/2013 8:17 PM To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net> Subject: Re: [Snort-users] Pulled Pork Question On 7/11/2013 12:36, Starner, Mark wrote:
I have been using the old create_sidmap.pl file from oinkmaster (but it looks like it will be difficult to modify to support sid-msg.map v2.
i was going to suggest create_sidmap.pl... what is "sid-msg.map v2"??? why does the current sid-msg.map format need to change? what benefits are there? -- NOTE: No off-list assistance is given without prior approval. Please keep mailing list traffic on the list unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Pulled Pork Question Starner, Mark (Jul 11)
- Re: Pulled Pork Question waldo kitty (Jul 11)
- <Possible follow-ups>
- Re: Pulled Pork Question Y M (Jul 11)
- Re: Pulled Pork Question Starner, Mark (Jul 11)
- Re: Pulled Pork Question Y M (Jul 11)
- Re: Pulled Pork Question Y M (Jul 11)
- Re: Pulled Pork Question JJ Cummings (Jul 11)
- Re: Pulled Pork Question Starner, Mark (Jul 11)
- Re: Pulled Pork Question JJ Cummings (Jul 11)
- Re: Pulled Pork Question Starner, Mark (Jul 11)
- Re: Pulled Pork Question JJ Cummings (Jul 11)