Snort mailing list archives
Re: Re: [Snort-users] Definitions of snort signatures
From: Chris Green <cmg () uab edu>
Date: Tue, 13 Nov 2001 10:02:56 -0600
"Don Weber" <Don.Weber () iris tamucc edu> writes:
I found the sp_reference.h but I am not sure how to implement it. None of the links that show up on the snortsnarf webpages link to a description of the alert. Is there a flag that needs to be set when I start snort or when I run snortsnarf? If I find the sp_reference.h and .c in the snort dir was it included in the build without setting a flag? Thanks for the help......Don
Not AFAIK. Perhaps you aren't giving SnortSnarf the location of your ruleset. -- Chris Green <cmg () uab edu> Fame may be fleeting but obscurity is forever. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Definitions of snort signatures Don Weber (Nov 13)
- Re: Definitions of snort signatures Chris Green (Nov 13)
- <Possible follow-ups>
- Re: Definitions of snort signatures Don Weber (Nov 13)
- Re: Re: [Snort-users] Definitions of snort signatures Chris Green (Nov 13)