Releases: Cisconate/Snort3Converter
Majority Suricata Support
This is the Second release of the converter tool which supports conversion of Suricata IDS rules to Snort 3 IDS rules. It is built hierarchically and modularly so that in the future I can easily expand it to support others.
This build has only been tested on a large selection of the rules posted to: https://rules.emergingthreats.net/open/suricata-5.0/rules/
These rules were tested by ingest to Firepower 7.0 FDM and FMC to validate Snort 3 syntax. This does NOT necessarily mean they are built correctly at this time, however would lend credence to the fact that they PROBABLY are.
In the future I plan to add a full rules conversion test. Currently a small group of rules are used each build to verify functionality.
Initial Release
This is a first release of the converter tool which supports conversion of Surricata IDS rules to Snort 3 IDS rules. It is built hierarchically and modularly so that in the future I can easily expand it to support many others.
This build has only been tested to support ssh rules, URL rules, and User-Agent rules.