Re: Fw: LOG DE ERRO

["bruno taranto" <bruno () hiss com br>]

Fala carlos,

Tudo bem?

Seguinte...
Vc tem q comentar (adicionar o "#" na frente da rules) a seguinte linha no
seu snort.conf.
Ela deve ficar da seguinte forma:
# include $RULE_PATH/experimental.rules

Essa linha eh para ser incluso as rules (teste) que vc criar ou estiver
fazendo testes.

Entendeu?

Qualquer coisa estamos ai!

Abracos!


___________________________________
Internet Security Services
"if you spend more on coffe than on IT security, then you will be hacked"
HISS, Inc.

Bruno Taranto
phone: +55 21 2221-2180
phone: +55 21 2508-0505 r.741
phone/fax: +55 21 2232-6209
email: bruno () hiss com br
corporate site: http://www.hiss.com.br
security portal: http://www.hacker.com.br
___________________________________


----- Original Message -----
From: "Carlos Augusto Silva" <carlos () tvcultura com br>
To: <snort-users () lists sourceforge net>
Sent: Thursday, April 18, 2002 4:10 PM
Subject: [Snort-users] Fw: LOG DE ERRO


> Estou recebendo a seguinte mensagem de erro:
> Apr 18 14:45:43 snort snort: Initializing daemon mode
> Apr 18 14:45:43 snort snort: PID stat checked out ok, PID set to /var/run/
> Apr 18 14:45:43 snort snort: Writing PID file to "/var/run/"
> Apr 18 14:45:50 snort snort: FATAL ERROR:  ERROR:
> /usr/local/snort/rules/experimental.rules(16) => Unknown keyword flow" in
> rule!
>  Apr 18 14:45:51 snort kernel: device eth0 left promiscuous mode
>
> O que devo fazer ?
> Obrigado a todos,
> Carlos
>
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users