Snort mailing list archives

Error with snort rule files


From: Kmar via Snort-sigs <snort-sigs () lists snort org>
Date: Sat, 18 Nov 2017 12:14:25 -0500

Hello, I have attempting to use various rule files such as bad-traffic.rules, dos.rules, etc, to analyze a pcap file 
for malicious traffic. Unfortunately,  Ir receive the same error for every rule file I attempt to use.  It works with 
the regular snort.conf file.

I use the following command:

Snort -r pcapfilename.pcap -c rulefilename.rules 

I receive the following error: 

Undefined variable in the string $EXTERNAL_NET     

I have edited the rule files but nothing seems to work properly.


Sent from Mail for Windows 10

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!

Current thread: