Snort mailing list archives
Re: sid 1882 stable Rule malfunctions in 2.0
From: Rodrigo Goya <lucent () securenet com mx>
Date: Thu, 26 Jun 2003 17:42:34 -0500
Hehe, had the same problem and do use SnortCenter, had to log into the database with MySQL and change rule 1882, I don't know if it was in the original rules package or SnortCenter duped a "byte_test:" with no arguments, which is what made my Snort fail. As now, I haven't seen support in SnortCenter for handling "byte_test" so if you try editing the rule inside SnortCenter it will just delete all references to "byte_test" in the rule. Cheers, Rodrigo On Thu, Jun 26, 2003 at 12:55:53PM -0700, Roy S. Rapoport wrote:
Oooh, ooh, can I guess? Are you using SnortCenter? -roy
-------------------------------------------------------------- "What is the most effective Windows NT remote management tool? A car." - Network Intrusion Detection, An Analyst's Handbook 2nd Edition, 2000 Stephen Northcutt et al, page 147 ------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- sid 1882 stable Rule malfunctions in 2.0 Matthew McCarty (Jun 26)
- Re: sid 1882 stable Rule malfunctions in 2.0 Erek Adams (Jun 26)
- Re: sid 1882 stable Rule malfunctions in 2.0 Roy S. Rapoport (Jun 26)
- Re: sid 1882 stable Rule malfunctions in 2.0 Rodrigo Goya (Jun 26)
- Re: sid 1882 stable Rule malfunctions in 2.0 Roy S. Rapoport (Jun 26)
- Re: sid 1882 stable Rule malfunctions in 2.0 Rodrigo Goya (Jun 26)