Snort mailing list archives

Re: Oinkmaster so_rules, signatures, and .map files


From: Magnus Jäder <magnus.jader () ki se>
Date: Mon, 18 Feb 2008 11:29:28 +0100

Hi

Regarding the map-files, have a look in the Oinkmaster package. You
should find create-sidmap.pl in the contrib directory. That's quite
useful :)

If you are using Barnyard, remember to restart it after updating the
map-files.

/ Magnus


CoryC wrote:
I'm using Oinkmaster to update the rules in 2.8.0.1
and have noticed that it doesn't update the .map files
so alerts just show up as numbers. Is that a known bug
or am I possibly doing something wrong?

I've also noticed that I need a way to update the
signatures folder (XXXX.txt files) in BASE when the
rules are updated, is there an easy way to do this
with Oinkmaster?

Also, does Oinkmaster support the so_rules folder?

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: