Snort mailing list archives
stuck with google is your friend time only
From: Crusty Saint <saintcrusty () gmail com>
Date: Thu, 31 Mar 2011 18:17:38 +0200
So what do i make of Encoded Rule Plugin SID: 17741, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 13475, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 15450, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 14255, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 16800, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 15529, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 16645, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 16503, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 13974, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 15327, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 18231, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 18215, GID: 3 not registered properly. Disabling this rule. Encoded Rule Plugin SID: 18206, GID: 3 not registered properly. Disabling this rule. ....... This is not amusing, i could not easily find a reason why this happens and what is the impact on snort performance, accuracy etc. Then followed by many flowbit messages Warning: flowbits key 'BrAin_Wiper_Chat' is set but not ever checked. Warning: flowbits key 'asp.upload' is set but not ever checked. Warning: flowbits key 'http.asx' is set but not ever checked. Warning: flowbits key 'Netspy_Command_Pattern' is set but not ever checked. ....... 361 out of 1024 flowbits in use. Which i do not consider to be too bad Thanks -- - - - Security Engineer - Tags: Analyst Systems Security Linux Firewall Network Web Troubleshooting - If you think I deserve a rant, write me off-list
------------------------------------------------------------------------------ Create and publish websites with WebMatrix Use the most popular FREE web apps or write code yourself; WebMatrix provides all the features you need to develop and publish your website. http://p.sf.net/sfu/ms-webmatrix-sf
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- stuck with google is your friend time only Crusty Saint (Mar 31)
- Re: stuck with google is your friend time only Nigel Houghton (Mar 31)
- Re: stuck with google is your friend time only Crusty Saint (Mar 31)
- Re: stuck with google is your friend time only Nigel Houghton (Mar 31)
- Re: stuck with google is your friend time only Crusty Saint (Mar 31)
- Re: stuck with google is your friend time only Crusty Saint (Mar 31)
- Re: stuck with google is your friend time only Nigel Houghton (Mar 31)