RE: (no subject)

["Bill Gercken" <bgercken () providentanalysis com>]

John,

The first 5 lines are normal. The ERROR lines looks like they are caused by
snort not being able
find the classification.config file. Make sure that your snort configuration
file contains the
correct path to this file. As in:

include /etc/snort/classification.config

(or something).

This line is near the top of the rules includes.

Regards,
-bill

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of John
Johnson
Sent: Tuesday, July 10, 2001 11:45 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] (no subject)



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

HELP... Snort 1.8 dies with a crap load of errors and I am not understand
this.

- -John


1:51 linux snort: Checking PID path...
1:51 linux snort: PATH_VARRUN is set to /var/run/ on this operating system
1:51 linux snort: Initializing daemon mode
1:51 linux snortd: snort startup succeeded
1:52 linux kernel: device eth0 entered promiscuous mode
1:52 linux snort: ERROR /etc/snort/backdoor.rules(116) => Bad Priority
setting "attempted-admin"
1:52 linux snort: ERROR /etc/snort/backdoor.rules(117) => Bad Priority
setting "attempted-admin"
1:52 linux snort: ERROR /etc/snort/backdoor.rules(118) => Bad Priority
setting "attempted-admin"
1:52 linux snort: ERROR /etc/snort/backdoor.rules(119) => Bad Priority
setting "attempted-admin"
1:52 linux snort: ERROR /etc/snort/backdoor.rules(120) => Bad Priority
setting "attempted-admin"
1:52 linux snort: ERROR /etc/snort/backdoor.rules(121) => Bad Priority
setting "attempted-admin"
1:52 linux snort: ERROR /etc/snort/backdoor.rules(122) => Bad Priority
setting "attempted-admin"
1:52 linux snort: ERROR /etc/snort/backdoor.rules(123) => Bad Priority
setting "attempted-admin"
1:52 linux snort: ERROR /etc/snort/backdoor.rules(124) => Bad Priority
setting "attempted-admin"
1:52 linux snort: ERROR /etc/snort/backdoor.rules(125) => Bad Priority
setting "attempted-user"
1:52 linux snort: ERROR /etc/snort/dos.rules(6) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(7) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(8) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(9) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(10) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(11) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(12) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(13) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(14) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(15) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(16) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(17) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(18) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(19) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dos.rules(20) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/dns.rules(6) => Bad Priority setting
"attempted-recon"
1:52 linux snort: ERROR /etc/snort/dns.rules(7) => Bad Priority setting
"bad-unknown"
1:52 linux snort: ERROR /etc/snort/dns.rules(8) => Bad Priority setting
"bad-unknown"
1:52 linux snort: ERROR /etc/snort/dns.rules(9) => Bad Priority setting
"attempted-recon"
1:52 linux snort: ERROR /etc/snort/dns.rules(10) => Bad Priority setting
"attempted-recon"
1:52 linux snort: ERROR /etc/snort/dns.rules(11) => Bad Priority setting
"attempted-recon"
1:52 linux snort: ERROR /etc/snort/dns.rules(12) => Bad Priority setting
"attempted-admin"
1:52 linux snort: ERROR /etc/snort/dns.rules(13) => Bad Priority setting
"attempted-admin"
1:52 linux snort: ERROR /etc/snort/dns.rules(14) => Bad Priority setting
"attempted-admin"
1:52 linux snort: ERROR /etc/snort/dns.rules(15) => Bad Priority setting
"attempted-admin"
1:52 linux snort: ERROR /etc/snort/dns.rules(16) => Bad Priority setting
"attempted-admin"
1:52 linux snort: ERROR /etc/snort/dns.rules(17) => Bad Priority setting
"attempted-admin"
1:52 linux snort: ERROR /etc/snort/dns.rules(18) => Bad Priority setting
"attempted-admin"
1:52 linux snort: ERROR /etc/snort/dns.rules(19) => Bad Priority setting
"attempted-admin"
1:52 linux snort: ERROR /etc/snort/dns.rules(20) => Bad Priority setting
"attempted-admin"
1:52 linux snort: ERROR /etc/snort/dns.rules(21) => Bad Priority setting
"attempted-admin"
1:52 linux snort: ERROR /etc/snort/ddos.rules(6) => Bad Priority setting
"attempted-recon"
1:52 linux snort: ERROR /etc/snort/ddos.rules(7) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(8) => Bad Priority setting
"attempted-recon"
1:52 linux snort: ERROR /etc/snort/ddos.rules(9) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(10) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(11) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(12) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(13) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(14) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(15) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(16) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(17) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(18) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(19) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(20) => Bad Priority setting
"bad-unknown"
1:52 linux snort: ERROR /etc/snort/ddos.rules(21) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(22) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(23) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(24) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(25) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(26) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(27) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(28) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(29) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(30) => Bad Priority setting
"attempted-dos"
1:52 linux snort: ERROR /etc/snort/ddos.rules(31) => Bad Priority setting
"attempted-dos"
Jul 10 20:51:52 linux snort: FATAL ERROR: [!] ERROR
/etc/snort/exploit.rules(32) => Bad port number: "(msg:"EXPLOIT"
-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.1

iQA/AwUBO0vLuwfP+qzR55XlEQIrxACg9T5YVtrVdZWF/in/+fjgMWwr9bMAnifb
4tcvI4Xxdio8GzY5+RwmDxFv
=2z1Z
-----END PGP SIGNATURE-----



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users