Skip to content

sid-msg.map generated only for newly processed rules #259

Open
@stan-prescott

Description

@stan-prescott

For those that use command line arguments that override pulledpork.conf and that use multiple rules files sources, all used rules aren't necessarily always updated or processed at the same time. If someone is using the VRT and VRT Community rules and keeping them in their original files and not the single snort.rules file, if only the VRT Community rules are updated at a particular time, for instance, the sid-msg.map is generated for only the VRT Community rules and does not include the VRT rules in the sid-msg.map.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions