yookd / pulledpork

Automatically exported from code.google.com/p/pulledpork
GNU General Public License v2.0
0 stars 0 forks source link

sid-msg.map contains all rules - even disabled ones #102

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Disable rules with disablesid.conf
2. Delete sid-msg.map
3. Run pulledpork -E

What is the expected output? What do you see instead?

As the sid-msg.map is generated after the .rules file - I would expect it to 
only include enabled rules. Using PP to manage VRT and ET rulesets results in a 
sid-msg.map of 28599 lines which can take a while for Barnyard2 to re-read.

What version of the product are you using? On what operating system?

0.6.1 on Linux (FC-14)

Please provide any additional information below.

Original issue reported on code.google.com by pe...@invisiblemenders.com on 3 Jan 2012 at 4:13

GoogleCodeExporter commented 9 years ago
Reproduced and verified, will be published to the next release

Original comment by Cummin...@gmail.com on 9 Jan 2012 at 11:26

GoogleCodeExporter commented 9 years ago
Fixed, Rev #235

Original comment by Cummin...@gmail.com on 26 Jan 2012 at 5:49