Snort mailing list archives
RE: byte_test and Snortcenter
From: <snort () van-wijnen net>
Date: Wed, 15 Oct 2003 22:58:40 +0200
Hi John, It's a bug in snortcenter with rule 1882. Have a look at this previous post: (search google on snortcenter byte_test) http://groups.google.com/groups?q=snortcenter+byte_test&start=10&hl=nl&l r=&ie=UTF-8&oe=UTF-8&selm=bef4ej%241itj%241%40FreeBSD.csie.NCTU.edu.tw&r num=12 This explains how to solve the problem. Cheers, Rick. -----Oorspronkelijk bericht----- Van: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] Namens John Hally Verzonden: dinsdag 14 oktober 2003 22:28 Aan: 'snort-users () lists sourceforge net' Onderwerp: [Snort-users] byte_test and Snortcenter Hello, I just installed snort-2.0.2 along with snortcenter. I updated the snort-sigs from the internet and push the rules fine, but when I try restarting the sensor, it fails because of the byte_test operator. Why would v2.0.2 not accept the byte_test operator? Has anyone else run into this? Thanks in advance! John Hally ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- byte_test and Snortcenter John Hally (Oct 14)
- RE: byte_test and Snortcenter snort (Oct 16)
- [Snort-Users] Patching Snort with SnortSAM DaniƩl Haslinger (Oct 19)
- script to extract payload info from mysql snort table samwun (Oct 19)
- error in running SnortSnarf samwun (Oct 19)
- Re: [Snort-Users] Patching Snort with SnortSAM Frank Knobbe (Oct 19)
- how to populate snort payload data to MySQL? samwun (Oct 22)
- RE: how to populate snort payload data to MySQL? Jeff Dell (Oct 22)
- RE: how to populate snort payload data to MySQL? samwun (Oct 22)
- how to convert payload data from MySQL data table to tcpdump formated data? samwun (Oct 22)
- Re: how to convert payload data from MySQL data table to tcpdump formated data? Erek Adams (Oct 22)
- Re: how to convert payload data from MySQL data table to tcpdump formated data? Sam Wun (Oct 23)
- [Snort-Users] Patching Snort with SnortSAM DaniƩl Haslinger (Oct 19)
- RE: byte_test and Snortcenter snort (Oct 16)