Fw: Whitehats rules don't work

["Sid" <s_i_d_j () yahoo com>]

> Jun  4 14:43:12 e220r trons[10691]: ERROR /sw/trons/conf/vision18.rules(1)
> => Bad Priority setting
>  "attempted-dos"
> Jun  4 14:43:12 e220r trons[10691]: ERROR /sw/trons/conf/vision18.rules(2)
> => Bad Priority setting
>  "attempted-admin"
> Jun  4 14:43:12 e220r trons[10691]: ERROR /sw/trons/conf/vision18.rules(3)
> => Bad Priority setting
>  "attempted-admin"
> Jun  4 14:43:12 e220r trons[10691]: ERROR /sw/trons/conf/vision18.rules(4)
> => Bad Priority setting
>  "successful-user"
> Jun  4 14:43:12 e220r trons[10691]: ERROR /sw/trons/conf/vision18.rules(5)
> => Bad Priority setting
>  "attempted-admin"
> Jun  4 14:43:12 e220r trons[10691]: ERROR /sw/trons/conf/vision18.rules(6)
> => Bad Priority setting
>  "successful-admin"
> Jun  4 14:43:12 e220r trons[10691]: ERROR /sw/trons/conf/vision18.rules(7)
> => Bad Priority setting
>  "attempted-admin"
> Jun  4 14:43:12 e220r trons[10691]: ERROR /sw/trons/conf/vision18.rules(8)
> => Bad Priority setting
>  "bad-unknown"
> Jun  4 14:43:12 e220r trons[10691]: ERROR /sw/trons/conf/vision18.rules(9)
> => Bad Priority setting
>  "successful-user"
>
>
> And so on and so forth  ....... i think Snort does not recognise the 20
> priority-system which whitehats follows.
>
> Siddhartha
>
> ----- Original Message -----
> From: "Fyodor" <fygrave () tigerteam net>
> To: "Sid" <s_i_d_j () yahoo com>
> Sent: Monday, June 04, 2001 5:44 PM
> Subject: Re: [Snort-users] Whitehats rules don't work
>
>
> > all right, and what are the error messages which you see :)
> >
> > On Mon, Jun 04, 2001 at 05:11:40PM +0530, Sid wrote:
> > > Ooop!! Sorry ... I use Snort 1.8 Beta5 Build24 and updated from the
CVS
> > > repository.
> > >
> > > ----- Original Message -----
> > > From: "Fyodor" <fygrave () tigerteam net>
> > > To: "Sid" <s_i_d_j () yahoo com>
> > > Sent: Monday, June 04, 2001 4:33 PM
> > > Subject: Re: [Snort-users] Whitehats rules don't work
> > >
> > >
> > > > which snort you use?
> > > > On Mon, Jun 04, 2001 at 03:48:21PM +0530, Sid wrote:
> > > > > Hi,
> > > > >
> > > > > I know i've missed something but the vision18.conf i downloaded
from
> > > > > whitehats.com doesn't work. It gives a lot of errors while
starting
> > > snort
> > > > > about bad rules. I think its the classification. Anyway, whats the
> way
> > > out??
> > > > > TIA,
> > > > >
> > > > > Siddhartha
> > > > >
> > > > >
> > > > >
> > > > > _________________________________________________________
> > > > > Do You Yahoo!?
> > > > > Get your free @yahoo.com address at http://mail.yahoo.com
> > > > >
> > > > >
> > > > > _______________________________________________
> > > > > Snort-users mailing list
> > > > > Snort-users () lists sourceforge net
> > > > > Go to this URL to change user options or unsubscribe:
> > > > > http://lists.sourceforge.net/lists/listinfo/snort-users
> > > > > Snort-users list archive:
> > > > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > > >
> > > > --
> > > > http://www.notlsd.net
> > > > PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1
> > >
> > >
> > > _________________________________________________________
> > > Do You Yahoo!?
> > > Get your free @yahoo.com address at http://mail.yahoo.com
> >
> > --
> > http://www.notlsd.net
> > PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users