Snort mailing list archives
run error from snort 1.8.3 /home/snort/rules/ddos.rules(16) => N o argument passed to keyword "msg"
From: "Crowell, Gary" <gary.crowell () experian com>
Date: Fri, 18 Jan 2002 16:30:49 -0600
Hi All, Any thoughts on why I am getting a runtime error of ERROR: /home/snort/rules/ddos.rules(16) => No argument passed to keyword "msg" Make sure you didn't forget a ':' or the argument to this keyword! Fatal Error, Quitting.
From ddos.rules....line 15, 16 and 17...
alert tcp $EXTERNAL_NET any -> $HOME_NET 27665 (msg:"DDOS Trin00 Attacker to Mas ter default mdie password";flags: A+; content:"killme"; classtype:bad-unknown; s id:235; rev:1;) alert icmp $EXTERNAL_NET any -> $HOME_NET any (msg:"DDOS Stacheldraht client-che ck-gag"; content: "|67 65 73 75 6E 64 68 65 69 74 21|"; itype: 0; icmp_id: 668; reference:arachnids,194; classtype:attempted-dos; sid:236; rev:1;) alert udp $EXTERNAL_NET any -> $HOME_NET 27444 (msg:"DDOS Trin00:MastertoDaemon( defaultpassdetected!)"; content:"l44adsl"; reference:arachnids,197; classtype:at tempted-dos; sid:237; rev:1;) Thanks in advance, gary crowell _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- run error from snort 1.8.3 /home/snort/rules/ddos.rules(16) => N o argument passed to keyword "msg" Crowell, Gary (Jan 18)