Re: Bad Priority Setting

[Phil Wood <cpw () lanl gov>]

See your classification.{config.vision} files [depending of if you are using
vision rules or snort rules].  Sounds like your rule sets are out of sync
with the version of snort you are running.

Also, make sure your all your var definitions match up with the "var's" used
in your rules.  Like, is it HOME_NET, or is it HOMENET, or is it INTERNAL?

On Tue, Jan 08, 2002 at 12:23:59PM -0500, J. J. Horner wrote:
> I've looked at the FAQ and in the archives back a month or so and I 
> can't find an answer to this:
>
> I'm getting a great deal of entries in syslog reporting a lot of 
> the snort-current rules as having a Bad Priority setting.  Am I missing
> something in my configuration or is this somewhat normal?
>
> Thanks
> JJ
>
> -- 
> J. J. Horner
> "H*","6a686f726e657240326a6e6574776f726b732e636f6d"
> ***************************************************
> "H*","6a6a686f726e65724062656c6c736f7574682e6e6574"
>
> Freedom is an all-or-nothing proposition:  either we 
> are completely free, or we are subjects of a
> tyrannical system.  If we lose one freedom in a
> thousand, we become completely subjugated.



-- 
Phil Wood, cpw () lanl gov


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users