Snort mailing list archives
Re: include problem in 1.8.6
From: Chris Green <cmg () sourcefire com>
Date: Wed, 10 Apr 2002 18:47:57 -0400
Mipam <mipam () ibb net> writes:
Hi, I tried to run snort with a conf file like this: include classifictation.config
include classification.config ( note the spelling )
alert icmp any any -> $INTERNAL any (msg:"ICMP ISS Pinger"; content:"|495353504e 475251|";itype:8;depth:32; reference:arachnids,158; classtype:attempted-recon; s id:465; rev:1;)
Didn't look at the ktrace.out... -- Chris Green <cmg () sourcefire com> Don't use a big word where a diminutive one will suffice. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- include problem in 1.8.6 Mipam (Apr 10)
- Re: include problem in 1.8.6 Chris Green (Apr 10)
- Re: include problem in 1.8.6 Mipam (Apr 10)
- Re: include problem in 1.8.6 Scott Fringer (Apr 10)
- Re: include problem in 1.8.6 Mipam (Apr 11)
- Re: include problem in 1.8.6 Mipam (Apr 10)
- Re: include problem in 1.8.6 Chris Green (Apr 10)