Snort mailing list archives

Re: include problem in 1.8.6


From: Chris Green <cmg () sourcefire com>
Date: Wed, 10 Apr 2002 18:47:57 -0400

Mipam <mipam () ibb net> writes:

Hi,

I tried to run snort with a conf file like this:

include classifictation.config

include classification.config ( note the spelling )

alert icmp any any -> $INTERNAL any (msg:"ICMP ISS Pinger"; content:"|495353504e
475251|";itype:8;depth:32; reference:arachnids,158; classtype:attempted-recon; s
id:465; rev:1;)

Didn't look at the ktrace.out...
-- 
Chris Green <cmg () sourcefire com>
Don't use a big word where a diminutive one will suffice.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: