Snort mailing list archives
error with rulesets
From: "Chris" <solsat555 () btinternet com>
Date: Sat, 5 May 2001 16:21:14 +0100
snort -V shows : -*> Snort! <*- Version 1.7 By Martin Roesch (roesch () clark net, www.snort.org) but... snort -v -c conf.file shows : Initializing Network Interface eth0 Kernel filter, protocol ALL, TURBO mode (63 frames), raw packet socket Decoding Ethernet on interface eth0 Initializing Preprocessors! Initializing Plug-ins! Initializating Output Plugins! +++++++++++++++++++++++++++++++++++++++++++++++++++ Initializing rule chains... database: compiled support for ( mysql ) database: configured to use mysql database: database name = snort database: user = SOMEone database: host = localhost database: detail level = full database: sensor name = 192.X.G.H database: sensor id = DD database: using the "log" facility [!] ERROR /etc/snort/exploit.rules(20) => Bad port number: "(msg:"EXPLOIT" the exploit.rules file (AS ALL the .rules) are from : http://www.snort.org/Files/Current/snortrules.tar.gz for Snort1.7 checked the rules file, cant pick up whats wrong with it please reply !!!! _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- error with rulesets Chris (May 05)
- Re: error with rulesets Martin Roesch (May 06)