Snort mailing list archives
Re: Rules troubles in startup
From: steveg <steveg () stevegcentral com>
Date: Wed, 26 Jun 2002 09:40:28 -0700 (PDT)
[!] ERROR .//web-cgi.rules(8) => Bad port number: "(msg:"WEB-CGI" Fatal Error, Quitting..
Yep this is telling you that snort can't identify the port number for rule number 8 in the web-cgi.rules file. more then likely it's trying to use $HTTP_PORTS and this var isnt' set in your snort.conf. you can either manually set the port (your web server port likely 80) or make sure you have the var set. ------------------------------------------------------- This sf.net email is sponsored by: Jabber Inc. Don't miss the IM event of the season | Special offer for OSDN members! JabberConf 2002, Aug. 20-22, Keystone, CO http://www.jabberconf.com/osdn _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Which rules to use for snort ? Ronald Nutter (Jun 02)
- Re: Which rules to use for snort ? matt (Jun 03)
- Rules troubles in startup Juan Pablo Villaverde (Jun 26)
- Re: Rules troubles in startup steveg (Jun 26)
- Rules troubles in startup Juan Pablo Villaverde (Jun 26)
- Re: Which rules to use for snort ? John Sage (Jun 03)
- <Possible follow-ups>
- RE: Which rules to use for snort ? Ronald Nutter (Jun 03)
- Re: Which rules to use for snort ? matt (Jun 03)