cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
477
Views
0
Helpful
1
Replies

SigWizMenu and packetd.conf

pheuch
Level 1
Level 1

What is the relationship between the SigWizMenu program and the definitions in packetd.conf?

As I started SigWizMenu I couldn't see any of my customer signatures from packetd.conf. It looks like that the data is stored in different places. Are the old StringMatches still active ?

1 Reply 1

klwiley
Cisco Employee
Cisco Employee

The SigWizMenu program places it's modifications in two files; SigUser.conf contains the SILVER rule set signature, and SigSettings.conf contain the rest of the custom signature information.

Your old String Matches are still active and will function until you remove them either with your management console or by manually editing packetd.conf. The signatures created with SigWizMenu are much more effective than the old String Match signatures so it would be worthwhile to convert them.