Snort mailing list archives
RE: new install rules question - solaris
From: "larosa, vjay" <larosa_vjay () emc com>
Date: Wed, 6 Nov 2002 13:19:29 -0500
Try this command. snort -h 192.168.1.0/24 -s blame_cmg -D 'net 192.168.1' Maybe you need the single quotes around the Pcap filter? vjl -----Original Message----- From: Dan Gahlinger [mailto:deg () interlynx net] Sent: Wednesday, November 06, 2002 12:54 PM To: snort-users () lists sourceforge net Subject: Re: [Snort-users] new install rules question - solaris Well snort core dumps still, so, I'm still waiting for someone to let me know what I should be doing here to fix this... Dan. At 05:00 PM 11/5/2002 -0500, you wrote:
Dan Gahlinger <deg () interlynx net> writes:-D still doesnt do anything, no matter where i put it unless I put it at the end of the command line, like: snort -h 192.168.1.0/24 -s blame_cmg net 192.168.1 -D then I get: ERROR: OpenPcap() FSM compilation failed: parse error PCAP command: net 192.168.1 -D Fatal Error, Quitting..snort -h 192.168.1.0/24 -s blame_cmg -D net 192.168.1
------------------------------------------------------- This sf.net email is sponsored by: See the NEW Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This sf.net email is sponsored by: See the NEW Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- new install rules question - solaris Dan Gahlinger (Nov 05)
- Re: new install rules question - solaris Chris Green (Nov 05)
- Re: new install rules question - solaris Dan Gahlinger (Nov 05)
- Re: new install rules question - solaris Andrew R. Baker (Nov 05)
- Re: new install rules question - solaris Chris Green (Nov 05)
- Re: new install rules question - solaris Dan Gahlinger (Nov 05)
- Re: new install rules question - solaris Dan Gahlinger (Nov 05)
- Re: new install rules question - solaris Erek Adams (Nov 05)
- Re: new install rules question - solaris Dan Gahlinger (Nov 06)
- Re: new install rules question - solaris Erek Adams (Nov 06)
- Re: new install rules question - solaris Dan Gahlinger (Nov 05)
- Re: new install rules question - solaris Chris Green (Nov 05)
- <Possible follow-ups>
- RE: new install rules question - solaris larosa, vjay (Nov 06)
- RE: new install rules question - solaris Dan Gahlinger (Nov 06)