Snort mailing list archives

Re: rule for cacti failed login


From: waldo kitty <wkitty42 () windstream net>
Date: Tue, 16 Sep 2014 12:46:16 -0400

On 9/16/2014 5:55 AM, Sharif Uddin wrote:
But this is a custom rule, how can I create description myself?

the description is the MSG portion of the rule... if you have the rule in (eg) 
local.rules and pulledpork knows about local.rules, then it should include the 
description automatically when it handles the sid-msg.map file...

-- 
  NOTE: No off-list assistance is given without prior approval.
        Please *keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

------------------------------------------------------------------------------
Want excitement?
Manually upgrade your production database.
When you want reliability, choose Perforce.
Perforce version control. Predictably reliable.
http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: