Re: ACID and sid-msg.map file

[Bahya NASSR EDDINE <bahya_nassr () yahoo fr>]

Thank you very much Guillaume. Information you gave is
very usefull to me.

Regards

--- Guillaume Arcas <guillaume.arcas () free fr> a écrit
:

> Bahya NASSR EDDINE a écrit :
>
> > By the way, by which program is the sid-msg.map
> file
> > used?
>
> Programs like Barnyard that do post-processing of
> trafic dumped by snort.
>
> > I actually download updates for snort rules from
> > different URLs, so I have to generate the
> sid-msg.map
> > file using a script... however, I don't know what
> does
> > exactly this file serve to?
>
> It can be used to filter alerts (see thresold.conf
> file for some
> examples). Very usefull to limit or trigger down
> some verbose
> preprocessors and decoders.
>
> Regards,
>
> -- 
>
> Guillaume Arcas
---------------------------------------------------------
> "L'amour, comme la foudre et le génie, procède
> volontiers
> par brusques lueurs." (A. Allais)



        
        
                
___________________________________________________________________________ 
Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger 
Téléchargez cette version sur http://fr.messenger.yahoo.com


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users