Re: [Snort-users] Oinkmaster so_rules, signatures, and .map files

Hi

Regarding the map-files, have a look in the Oinkmaster package. You
should find create-sidmap.pl in the contrib directory. That's quite
useful :)

If you are using Barnyard, remember to restart it after updating the
map-files.

/ Magnus


CoryC wrote:
> I'm using Oinkmaster to update the rules in 2.8.0.1
> and have noticed that it doesn't update the .map files
> so alerts just show up as numbers. Is that a known bug
> or am I possibly doing something wrong?
>
> I've also noticed that I need a way to update the
> signatures folder (XXXX.txt files) in BASE when the
> rules are updated, is there an easy way to do this
> with Oinkmaster?
>
> Also, does Oinkmaster support the so_rules folder?
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users