Re: Acid 0.9.6b6 Reference Links

["Brad T." <bthaler () webstream net>]

No, the actual text in the "signature" field of the web pages just contains
the "msg" portion of the corresponding Snort rule.

For example, when snort detects a "Large ICMP Packet", and puts it into the
database, Acid shows "MISC Large ICMP Packet" in the "signature" field of
its output.  Shouldn't this be a hyperlink to the corresponding entry in the
arachnids database?

I can't remember the PHP errors that b12 gave me, but I'm not using it
anymore.  According to your site, b6 has "reference tag support", so I
should be seeing this, right?


Thanks,
Brad T.


----- Original Message -----
From: <roman () danyliw com>
To: "Brad T." <bthaler () webstream net>
Cc: <snort-users () lists sourceforge net>
Sent: Friday, July 20, 2001 10:03 AM
Subject: Re: [Snort-users] Acid 0.9.6b6 Reference Links


> > I can't figure out why I'm not able to use the whitehats.com reference
> > hyperlinks that acid is supposed to generate.  I'm no PHP programmer by
any
> > means, but I can see the code that is supposed to do this in
acid_common.php
> > (lines 379-391 and 414-418).
>
> Do you signatures look like "IDS/100 foo"?
>
> > BTW, I've tried acid-0.9.6b12 and got a bunch of PHP errors, so I went
back
> > to b6 for now.
>
> What were these errors?
>
> Roman
>
>
> ---------------------------------------------
> This message was sent using Voicenet WebMail.
>       http://www.voicenet.com/webmail/


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users