Snort mailing list archives

Rules troubles in startup


From: Juan Pablo Villaverde <jpablo () spcom com ar>
Date: Wed, 26 Jun 2002 12:46:23 -0300



I'm using oinkmaster to update rules, and now I'm getting an error
when snort starts. It seems to be an invalid rule... this is the
error:

[!] ERROR .//web-cgi.rules(8) => Bad port number: "(msg:"WEB-CGI"
Fatal Error, Quitting..

If you have any clue about it, please tell me. Thanks.

The complete startup log:


Log directory = /var/log/snort

Initializing Network Interface ppp0
using config file /etc/snort.conf
Parsing Rules file /etc/snort.conf
No arguments to frag2 directive, setting defaults to:
    Fragment timeout: 60 seconds
    Fragment memory cap: 4194304 bytes
Stream4 config:
    Stateful inspection: ACTIVE
    Session statistics: INACTIVE
    Session timeout: 30 seconds
    Session memory cap: 8388608 bytes
    State alerts: INACTIVE
    Scan alerts: ACTIVE
    Log Flushed Streams: INACTIVE
No arguments to stream4_reassemble, setting defaults:
     Reassemble client: ACTIVE
     Reassemble server: INACTIVE
     Reassemble ports: 21 23 25 53 80 143 110 111 513
     Reassembly alerts: ACTIVE
     Reassembly method: FAVOR_OLD
[!] ERROR .//web-cgi.rules(8) => Bad port number: "(msg:"WEB-CGI"
Fatal Error, Quitting..

--
Juan Pablo Villaverde
Tec. en Infraestructura de Redes
Soluciones Punto Com S.A. 
http://www.spcom.com.ar





-------------------------------------------------------
This sf.net email is sponsored by: Jabber Inc.
Don't miss the IM event of the season | Special offer for OSDN members! 
JabberConf 2002, Aug. 20-22, Keystone, CO http://www.jabberconf.com/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: