RE: ERROR LOG

["Wirth, Jeff" <WirthJe () DNB com>]

Carlos,

> I recept error message:
>
> Apr 18 14:45:43 snort snort: Initializing daemon mode
> Apr 18 14:45:43 snort snort: PID stat checked out ok, PID set 
> to /var/run/
> Apr 18 14:45:43 snort snort: Writing PID file to "/var/run/"
> Apr 18 14:45:50 snort snort: FATAL ERROR:  ERROR:
> /usr/local/snort/rules/experimental.rules(16) => Unknown 
> keyword flow" in
> rule!
> Apr 18 14:45:51 snort kernel: device eth0 left promiscuous mode

Looks like a rule syntax error to me.  Check your experimental.rules file
line number 16. Would be helpful if you posted the rule in question... 

- Jeff

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users