Re: rule for cacti failed login

[waldo kitty <wkitty42 () windstream net>]

On 9/16/2014 1:01 PM, Sharif Uddin wrote:
> I still don't understand how pulledpork will know about this rule if it don't exist in snortrules?

because you have it in (eg) local.rules and you have (somehow) told pulledpork 
about it so it can include it in the sid-msg.map...

-- 
  NOTE: No off-list assistance is given without prior approval.
        Please *keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

------------------------------------------------------------------------------
Want excitement?
Manually upgrade your production database.
When you want reliability, choose Perforce
Perforce version control. Predictably reliable.
http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!