Snort mailing list archives
Rules troubles in startup
From: Juan Pablo Villaverde <jpablo () spcom com ar>
Date: Wed, 26 Jun 2002 12:46:23 -0300
I'm using oinkmaster to update rules, and now I'm getting an error when snort starts. It seems to be an invalid rule... this is the error: [!] ERROR .//web-cgi.rules(8) => Bad port number: "(msg:"WEB-CGI" Fatal Error, Quitting.. If you have any clue about it, please tell me. Thanks. The complete startup log: Log directory = /var/log/snort Initializing Network Interface ppp0 using config file /etc/snort.conf Parsing Rules file /etc/snort.conf No arguments to frag2 directive, setting defaults to: Fragment timeout: 60 seconds Fragment memory cap: 4194304 bytes Stream4 config: Stateful inspection: ACTIVE Session statistics: INACTIVE Session timeout: 30 seconds Session memory cap: 8388608 bytes State alerts: INACTIVE Scan alerts: ACTIVE Log Flushed Streams: INACTIVE No arguments to stream4_reassemble, setting defaults: Reassemble client: ACTIVE Reassemble server: INACTIVE Reassemble ports: 21 23 25 53 80 143 110 111 513 Reassembly alerts: ACTIVE Reassembly method: FAVOR_OLD [!] ERROR .//web-cgi.rules(8) => Bad port number: "(msg:"WEB-CGI" Fatal Error, Quitting.. -- Juan Pablo Villaverde Tec. en Infraestructura de Redes Soluciones Punto Com S.A. http://www.spcom.com.ar ------------------------------------------------------- This sf.net email is sponsored by: Jabber Inc. Don't miss the IM event of the season | Special offer for OSDN members! JabberConf 2002, Aug. 20-22, Keystone, CO http://www.jabberconf.com/osdn _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Which rules to use for snort ? Ronald Nutter (Jun 02)
- Re: Which rules to use for snort ? matt (Jun 03)
- Rules troubles in startup Juan Pablo Villaverde (Jun 26)
- Re: Rules troubles in startup steveg (Jun 26)
- Rules troubles in startup Juan Pablo Villaverde (Jun 26)
- Re: Which rules to use for snort ? John Sage (Jun 03)
- <Possible follow-ups>
- RE: Which rules to use for snort ? Ronald Nutter (Jun 03)
- Re: Which rules to use for snort ? matt (Jun 03)