# SID allocation mapping

**URL:** <https://forum.suricata.io/t/sid-allocation-mapping/818>\
**Category:** Rules\
**Created:** [November 12, 2020, 4:11pm UTC](https://forum.suricata.io/t/sid-allocation-mapping/818 "2020-11-12T16:11:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![karl](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/karl/32/463_2.png) [@karl](https://forum.suricata.io/u/karl)\
**Post date:** [November 12, 2020, 4:11pm UTC](https://forum.suricata.io/t/sid-allocation-mapping/818/1 "2020-11-12T16:11:42Z")

</div>

Hi,  
Is there a document anywhere that show which “sid:prefix” maps to which source or vendor? I have seen [https://doc.emergingthreats.net/bin/view/Main/SidAllocation](https://doc.emergingthreats.net/bin/view/Main/SidAllocation)

Ideally i’m looking for “sid:123” is “source X”. Then the range sid:456 to sid:789 is source Y. Is there a table to document this anywhere?

How do different rule authors avoid conflicts?

---

<div class="post-metadata">

**Author:** ![ish](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/ish/32/8_2.png) [@ish](https://forum.suricata.io/u/ish)\
**Post date:** [November 12, 2020, 4:14pm UTC](https://forum.suricata.io/t/sid-allocation-mapping/818/2 "2020-11-12T16:14:04Z")

</div>

I think thats the only document at this time. But stay tuned, we’ve just been talking about adding the SID ranges to our rule index, which could then provide a mapping like this.

---

<div class="post-metadata">

**Author:** ![karl](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/karl/32/463_2.png) [@karl](https://forum.suricata.io/u/karl)\
**Post date:** [November 12, 2020, 4:20pm UTC](https://forum.suricata.io/t/sid-allocation-mapping/818/3 "2020-11-12T16:20:07Z")

</div>

Thanks for the quick response. Yes having it in the rule index would be great!