barnyard missing SID msg map file from snort

1 vote

1 answer

2303 views

snort

                          I installed snort (currently ver. 2.9.7.0-5) then compiled Barnyard2 Version 2.1.14 (Build 337). At first try with:  

    sudo ./barnyard2 -c ../etc/barnyard2.conf -o /var/log/snort/snort.alert

I get Unable to open SID file '/etc/snort/sid-msg.map' (No such file or directory). Which is true, /etc/snort/sid-msg.map indeed is missing. I tried with the existing /etc/snort/community-sid-msg.map but then I get:  

    ERROR: [ParseSidMapLine()]: Unknown sidmap file version 

Am I missing something or what should I do in order to make it work?

    lsb_release -a
    No LSB modules are available.
    Distributor ID:	Ubuntu
    Description:	Ubuntu 16.04.4 LTS
    Release:	16.04
    Codename:	xenial
                        

Asked by Adrian (773 rep)

Apr 5, 2018, 05:27 PM
Last activity: Apr 6, 2018, 10:37 PM

barnyard missing SID msg map file from snort

Related Questions