Snort mailing list archives
Community rules archive... request (well, suggestion)
From: Jeff Kell <jeff-kell () utc edu>
Date: Wed, 16 Nov 2005 10:13:52 -0500
I don't know how many snort users may be in a similar situation, but I have an issue with the community rules packaging the sid-msg.map file with the name 'sid-msg.map'. I use oinkmaster to update my rulesets, and use the multiple url feature to check snort VRF, bleeding-snort, and [trying to add] the community rules. As it stands, this results in:
/usr/local/bin/oinkmaster.pl: Error: a file called "sid-msg.map" exists in multiple rules archives
Other archives typically prefix this filename (e.g., "bleeding-sid-msg.map) which is helpful for barnyard by having it's startup script do a 'cat *sid-msg.map > barnyard-sid-msg.map' to update this file on the fly. Could this be changed in the community rules as well? community-sid-msg.map? Pleeeease :-) Jeff ------------------------------------------------------- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Community rules archive... request (well, suggestion) Jeff Kell (Nov 16)
- Re: Community rules archive... request (well, suggestion) Nerijus Krukauskas (Nov 16)