Snort mailing list archives

Re: FreeBSD 5.3 OpenPcap() FSM compilation failed:


From: Jeremy Hewlett <jh () sourcefire com>
Date: Fri, 7 Jan 2005 16:00:44 -0500

On Wed, Dec 29, Lang Hoang wrote:
   But when I try run with option -F bpf support it failed.

[...]

   wa05sp# less /usr/local/share/snort/filters.bpf

   not dst host 224.0.0.13

   not dst host 224.0.16.171

   not dst host 237.168.2.151

   /usr/local/share/snort/filters.bpf (END)

Your filters.bpf is written incorrectly. You need to connect those
statements - typically with "and" or "or."

ie: 
 not dst host foo 
 and 
 not dst host bar


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: