Snort mailing list archives

stuck with google is your friend time only


From: Crusty Saint <saintcrusty () gmail com>
Date: Thu, 31 Mar 2011 18:17:38 +0200

So what do i make of

Encoded Rule Plugin SID: 17741, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 13475, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 15450, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 14255, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 16800, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 15529, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 16645, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 16503, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 13974, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 15327, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 18231, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 18215, GID: 3 not registered properly.  Disabling
this rule.

Encoded Rule Plugin SID: 18206, GID: 3 not registered properly.  Disabling
this rule.
.......
This is not amusing, i could not easily find a reason why this happens and
what is the impact on snort performance, accuracy etc.


Then followed by many flowbit messages

Warning: flowbits key 'BrAin_Wiper_Chat' is set but not ever checked.
Warning: flowbits key 'asp.upload' is set but not ever checked.
Warning: flowbits key 'http.asx' is set but not ever checked.
Warning: flowbits key 'Netspy_Command_Pattern' is set but not ever checked.
.......
361 out of 1024 flowbits in use.


Which i do not consider to be too bad

Thanks

-- 
- - -
Security Engineer - Tags: Analyst Systems Security Linux Firewall Network
Web Troubleshooting - If you think I deserve a rant, write me off-list
------------------------------------------------------------------------------
Create and publish websites with WebMatrix
Use the most popular FREE web apps or write code yourself; 
WebMatrix provides all the features you need to develop and 
publish your website. http://p.sf.net/sfu/ms-webmatrix-sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: