RE: help please

[Erek Adams <erek () theadamsfamily net>]

On Thu, 27 Sep 2001, d'Ambly, Jeff wrote:

> Hey thanks, dmearc was overwriting my config, but now I get this error when
> I start snort

Ok, cool!  I now I'm not so confused. :)

> ERROR /usr/local/demarc/conf/policy.rules(29) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(30) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(31) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(32) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(33) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(34) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(35) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(36) => Bad Priority setting
> "bad-unknown"

Make sure you have the lines:

 # Include classification & priority settings
 include classification.config

In snort.conf.  Then make sure you have:

 config classification: bad-unknown,Potentially Bad Traffic, 2

in that file.  At that point, all should be well.

Hope that helps!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users