Snort mailing list archives
Snort Alert Description in BASE
From: chris mr <chris.misztur () yahoo com>
Date: Thu, 13 Sep 2007 10:57:14 -0700 (PDT)
I downloaded bleeding-edge rulesets and set them up in snort.conf. I also CAT sid-msg.map with bleeding-sid-msg-map.txt. However, when I open BASE I still get a generic Snort Alert... How can these be replaced with detail info on the signature? [local] [snort] Snort Alert [1:2002872:0] policy-violation 1(0%) 1 1 1 2007-09-13 17:42:39 2007-09-13 17:42:39 Thanks chris. ____________________________________________________________________________________ Luggage? GPS? Comic books? Check out fitting gifts for grads at Yahoo! Search http://search.yahoo.com/search?fr=oni_on_mail&p=graduation+gifts&cs=bz ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort Alert Description in BASE chris mr (Sep 13)
- Re: Snort Alert Description in BASE David J. Bianco (Sep 13)
- <Possible follow-ups>
- Re: Snort Alert Description in BASE chris mr (Sep 13)