Snort mailing list archives

run error from snort 1.8.3 /home/snort/rules/ddos.rules(16) => N o argument passed to keyword "msg"


From: "Crowell, Gary" <gary.crowell () experian com>
Date: Fri, 18 Jan 2002 16:30:49 -0600

Hi All,

Any thoughts on why I am getting a runtime error of
        ERROR: /home/snort/rules/ddos.rules(16) => No argument passed to
keyword "msg"
        Make sure you didn't forget a ':' or the argument to this keyword!
        Fatal Error, Quitting.

From ddos.rules....line 15, 16 and 17...
alert tcp $EXTERNAL_NET any -> $HOME_NET 27665 (msg:"DDOS Trin00 Attacker to
Mas
ter default mdie password";flags: A+; content:"killme";
classtype:bad-unknown; s
id:235; rev:1;)
alert icmp $EXTERNAL_NET any -> $HOME_NET any (msg:"DDOS Stacheldraht
client-che
ck-gag"; content: "|67 65 73 75 6E 64 68 65 69 74 21|"; itype: 0; icmp_id:
668; 
reference:arachnids,194; classtype:attempted-dos; sid:236; rev:1;)
alert udp $EXTERNAL_NET any -> $HOME_NET 27444 (msg:"DDOS
Trin00:MastertoDaemon(
defaultpassdetected!)"; content:"l44adsl"; reference:arachnids,197;
classtype:at
tempted-dos; sid:237; rev:1;)


Thanks in advance,

gary crowell

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: