Is there a way to know from which source a rule is coming from based on its SID?

Hello all,

Is have recently installed a new Suricata and I am getting a lot of FP/uninteresting alerts with the SID 3301xxx. The metadata in the alerts do not indicate the source of the rules.

I would like to know if there is an easy way to identify the source of these rules?

Hello!

You can check SID allocations here: https://sidallocation.org/

Excellent, that is exactly what I needed.