Snort config files

[James <snort () cyclohexane net>]

Hi,

For the filenames listed below, should I use as a base the ones that come
with the latest 2.9.11 source files, or the ones that come with the latest
rules snapshot? It seems obvious to use the ones that come with the rules
because they are all larger (or the same) and presumably newer. But
unicode.map is larger in the installers version (157K vs 53K).

classification.config
reference.config
sid-msg.map
threshold.conf
unicode.map

Thanks
James

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!