Snort Forums Archive

Archive Home » Snort Newbies » Acid and snort rules database

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Acid and snort rules database

Posted by Malcolm on March 16, 2005 09:49:57

I recently inherited a snort system (NIDS) with two snort probes and using Barnyard to off load to a MySQL database. Examining the alerts with ACID, there were links in the alert lines [SNORT] that would direct you to the Snort.org alert database. Recently that link no longer works (page unavailable). Is there an update to ACID that repairs those links and directs you to the new database pages? I apologize in advance. As I mentioned, I’m new to SNORT and need to come up to speed quickly.

Thanks.

Posted by mogurakun on March 20, 2005 05:20:10

Correspondence to the new SnortID data base is as follows.

For BASE
The base_conf.php 272 line is changed as follows.

"snort" => array("http://www.snort.org/pub-bin/sigs.cgi?sid=", ""),

For ACID
The acid_conf.php 237 line is set as well as on.