From a1eab4a2e22d100229407f3e168662a42396eca7 Mon Sep 17 00:00:00 2001 From: Travis Green Date: Tue, 23 Dec 2014 15:10:21 -0700 Subject: [PATCH] Update reference.config Updated reference.config to match ET Open reference.config found here: https://rules.emergingthreats.net/open/suricata/reference.config Due to startup error shown here: root@xxxxxxx01:/etc/suricata/rules# /usr/bin/suricata -c /etc/suricata/suricata.yaml --pidfile /var/run/suricata.pid --af-packet 23/12/2014 -- 22:07:56 - - [ERRCODE: SC_ERR_REFERENCE_UNKNOWN(150)] - unknown reference key "osvdb". Supported keys are defined in reference.config file. Please have a look at the conf param "reference-config-file" <...> Killed --- reference.config | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/reference.config b/reference.config index 1d1b42d898..ff4f53ddbc 100644 --- a/reference.config +++ b/reference.config @@ -3,6 +3,7 @@ config reference: bugtraq http://www.securityfocus.com/bid/ config reference: bid http://www.securityfocus.com/bid/ config reference: cve http://cve.mitre.org/cgi-bin/cvename.cgi?name= +#config reference: cve http://cvedetails.com/cve/ config reference: secunia http://www.secunia.com/advisories/ #whitehats is unfortunately gone @@ -12,8 +13,14 @@ config reference: McAfee http://vil.nai.com/vil/content/v_ config reference: nessus http://cgi.nessus.org/plugins/dump.php3?id= config reference: url http:// config reference: et http://doc.emergingthreats.net/ -config reference: etpro http://doc.emergingthreatpro.com/ +config reference: etpro http://doc.emergingthreatspro.com/ config reference: telus http:// - -config reference: md5 http://www.threatexpert.com/report.aspx?md5= - +config reference: osvdb http://osvdb.org/show/osvdb/ +config reference: threatexpert http://www.threatexpert.com/report.aspx?md5= +config reference: md5 http://www.threatexpert.com/report.aspx?md5= +config reference: exploitdb http://www.exploit-db.com/exploits/ +config reference: openpacket https://www.openpacket.org/capture/grab/ +config reference: securitytracker http://securitytracker.com/id? +config reference: secunia http://secunia.com/advisories/ +config reference: xforce http://xforce.iss.net/xforce/xfdb/ +config reference: msft http://technet.microsoft.com/security/bulletin/