Re: Error message that has me completely stumped

[Dr_Jung <drjung () sprynet com>]

Mike Tavares wrote:
> So I be the newbie with this product.  I am trying to get it configured and
> am getting this error message regardless of what rule I try.
>
> Can anyone offer any advice.  The system is a Windows 2000 box.
>
> ERROR D:\Security\IDS\snort\rules\icmp.rules:4 => Port value missing in
> rule!
>
> These are the default 1.7 rules, and I get this error message either running
> Snort manually or from the IDScenter (1.08d)
>
> I know I missed some step along the way just not sure which one.
>
> Thanks for the help
> -Mike
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

Have you looked at your icmp.rule file to see if a port assignment is
missing from one of your statements?

Craig Woods
UNIX SA

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users