Snort mailing list archives

Re: Current Rule Set


From: "Elinus Liga" <elinus () wow-vision com>
Date: Wed, 12 Jun 2002 19:35:08 +0800

I am using RH7.2 and snort-1.8.6, and when I insert wrong syntax rules ,
Snort will log error in /var/log/messages.
It should tell you which rule & line number.
This is just my sample:
Jun 12 19:25:34 RH72 snort: FATAL ERROR:  ERROR: /etc/snort/virus.rules(97)
=> Unknown keyword "resp" in rule!

Rgds,
Liga

----- Original Message -----
From: "Hall, Duane" <hallu () hastings-ent com>
To: "Snort Userslist" <snort-users () lists sourceforge net>
Sent: Tuesday, June 11, 2002 5:49 AM
Subject: [Snort-users] Current Rule Set


I just loaded the current rule set and am getting rule errors when
loading snort.  Is there any way for snort to tell me which rules are
having errors?  It tells me that there are bad ports.

Duane


**************************
Duane Hall
Security Administrator
Hastings Entertainment, Inc.
806-351-2300 X-3945




_______________________________________________________________

Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: