Snort mailing list archives
Re: Rules Errors
From: "Mike Macias" <mike.macias () caci-nsg com>
Date: Wed, 3 Apr 2002 22:27:36 -0500
I had this problem also. Instead of removing the references to "classtype:" from my rules files I cut and pasted the classification.config file into the snort.conf file. This solved my problems. Don't know if this is a recommended workaround. Mike ----- Original Message ----- From: "Turner Ryan S CONT KPWA" <TurnerRS () kpt nuwc navy mil> To: "'Andrew Blevins'" <ABlevins () arrowheadgrp com>; "'Snort Users'" <snort-users () lists sourceforge net> Sent: Sunday, March 31, 2002 11:10 PM Subject: RE: [Snort-users] Rules Errors
I ran into this problem also. The only way I could work around it was by manually editing my rules files and taking out all references to
"classtype:
(whatever) ;". once I did that they worked fine without errors. Demarc has some weird
stuff
where you can set priority settings on certain rules, and I tried using
that
to set priorities but even then I would still get the error until I
removed
all classtypes. I know lame fix, but I couldn't figure out how to get
around
it any other way. -----Original Message----- From: Andrew Blevins [mailto:ABlevins () arrowheadgrp com] Sent: Friday, March 29, 2002 11:59 AM To: 'Snort Users' Subject: [Snort-users] Rules Errors Hey all, Thanks for the help in getting rules up and running from Ryan Turner and Michael Steele. Now that snort is recognizing the rules files, which are the default ones that come with installation (I didn't create them), it is saying that
there
are "bad priority settings" in the rule (scan.rules). It still says 25 rules loaded, but each one has errors. Any ideas? Blevins _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: Rules Errors Turner Ryan S CONT KPWA (Mar 31)
- Re: Rules Errors Mike Macias (Apr 03)