Snort mailing list archives

Re: rules errors


From: Matt Kettler <mkettler () evi-inc com>
Date: Fri, 08 Aug 2003 11:59:42 -0400

At 01:22 PM 8/7/2003 -0400, Sheahan, Paul wrote:
Just downloaded snortrules-stable and the comment on the site says "works
for 1.9.x". I'm running Snort Version 1.9.0 (Build 209) on Linux. Yet after
installing the rules I get these errors when starting Snort:

I think that's a bug where the website hasn't been updated. Snort 1.9.x is no longer the "stable" version. it's 2.x..

It should also be noted that you must be sure to not use stream4 in 1.9.x. It is vulnerable to remote exploit for arbitrary code execution in the context of whatever user snort runs as (root by default).



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: