FATALs with snort-2.9.0.3

["Lay, James" <james.lay () wincofoods com>]

Yep...latest et rules:

 

Dec 21 08:32:14 10.21.88.2 snort[30722]: FATAL ERROR:
/usr/local/etc/snort/rules/emerging-p2p.rules(110) depth can't be used
with itself, distance, or within

Dec 21 08:32:50 10.21.88.2 snort[30725]: FATAL ERROR:
/usr/local/etc/snort/rules/emerging-p2p.rules(114) depth can't be used
with itself, distance, or within

Dec 21 08:33:04 10.21.88.2 snort[30728]: FATAL ERROR:
/usr/local/etc/snort/rules/emerging-p2p.rules(118) depth can't be used
with itself, distance, or within

Dec 21 08:33:27 10.21.88.2 snort[30731]: FATAL ERROR:
/usr/local/etc/snort/rules/emerging-p2p.rules(230) within can't be used
with itself, offset, or depth

Dec 21 08:33:47 10.21.88.2 snort[30734]: FATAL ERROR:
/usr/local/etc/snort/rules/emerging-p2p.rules(390) depth can't be used
with itself, distance, or within

Dec 21 08:34:10 10.21.88.2 snort[30737]: FATAL ERROR:
/usr/local/etc/snort/rules/emerging-p2p.rules(394) depth can't be used
with itself, distance, or within

Dec 21 08:34:44 10.21.88.2 snort[30740]: FATAL ERROR:
/usr/local/etc/snort/rules/emerging-p2p.rules(398) depth can't be used
with itself, distance, or within

Dec 21 08:34:57 10.21.88.2 snort[30743]: FATAL ERROR:
/usr/local/etc/snort/rules/emerging-p2p.rules(402) depth can't be used
with itself, distance, or within

 

Got tired of commenting things out, so I'll wait until this is fixed...

 

 

   ,,_     -*> Snort! <*-

  o"  )~   Version 2.9.0.3 (Build 98)

   ''''    By Martin Roesch & The Snort Team:
http://www.snort.org/snort/snort-team

           Copyright (C) 1998-2010 Sourcefire, Inc., et al.

           Using libpcap version 1.0.0

           Using PCRE version: 7.6 2008-01-28

           Using ZLIB version: 1.2.3

 

These are the nogpl badboys.

 

2010-12-17 19:30 emerging-attack_response.rules

2010-12-17 19:30 emerging-p2p.rules

 

James Lay

IT Security Analyst

WinCo Foods

208-672-2014 Office

208-559-1855 Cell

650 N Armstrong Pl.

Boise, Idaho 83704

<<winmail.dat>>

------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users