[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-users
Subject:    [Snort-users] Snort config files
From:       James <snort () cyclohexane ! net>
Date:       2017-10-17 8:59:18
Message-ID: CAFQatLPWxd+_UmH6uqHSG7z7+MABpR_6sOfQbuO7AANCt2p9dw () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi,

For the filenames listed below, should I use as a base the ones that come
with the latest 2.9.11 source files, or the ones that come with the latest
rules snapshot? It seems obvious to use the ones that come with the rules
because they are all larger (or the same) and presumably newer. But
unicode.map is larger in the installers version (157K vs 53K).

classification.config
reference.config
sid-msg.map
threshold.conf
unicode.map

Thanks
James

[Attachment #5 (text/html)]

<div dir="ltr">Hi,<div><br></div><div>For the filenames listed below, should I use as \
a base the ones that come with the latest 2.9.11 source files, or the ones that come \
with the latest rules snapshot? It seems obvious to use the ones that come with the \
rules because they are all larger (or the same) and presumably newer. But unicode.map \
is larger in the installers version (157K vs \
53K).</div><div><br></div><div><div>classification.config</div><div>reference.config</ \
div><div>sid-msg.map</div><div>threshold.conf<br></div><div>unicode.map</div></div><div><br></div><div>Thanks</div><div>James</div></div>




_______________________________________________
Snort-users mailing list
Snort-users@lists.snort.org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


[prev in list] [next in list] [prev in thread] [next in thread]