From f083790a608935f516b6aadec50c716240436ed5 Mon Sep 17 00:00:00 2001 From: da_667 Date: Tue, 22 Nov 2016 13:24:46 -0500 Subject: [PATCH] sid-msg.map version change had to change this to "1" for the TA-unified2 app from Hurricane Labs. The app requires sid-msg.map version 1 to work properly. --- Autosnort - Ubuntu/AVATAR/autosnort-ubuntu-AVATAR.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Autosnort - Ubuntu/AVATAR/autosnort-ubuntu-AVATAR.sh b/Autosnort - Ubuntu/AVATAR/autosnort-ubuntu-AVATAR.sh index a3699b1..328e8b2 100644 --- a/Autosnort - Ubuntu/AVATAR/autosnort-ubuntu-AVATAR.sh +++ b/Autosnort - Ubuntu/AVATAR/autosnort-ubuntu-AVATAR.sh @@ -391,7 +391,7 @@ echo "temp_path=/tmp" >> pulledpork.tmp echo "rule_path=$snort_basedir/rules/snort.rules" >> pulledpork.tmp echo "local_rules=$snort_basedir/rules/local.rules" >> pulledpork.tmp echo "sid_msg=$snort_basedir/etc/sid-msg.map" >> pulledpork.tmp -echo "sid_msg_version=2" >> pulledpork.tmp +echo "sid_msg_version=1" >> pulledpork.tmp echo "sid_changelog=/var/log/sid_changes.log" >> pulledpork.tmp echo "sorule_path=$snort_basedir/snort_dynamicrules/" >> pulledpork.tmp echo "snort_path=$snort_basedir/bin/snort" >> pulledpork.tmp