RE: Error message that has me completely stumped

[Joe Lawson <jlawson () financeware com>]

Mike:

There should be a line number referenced in the error message.  Open up your
ruleset with notepad and <ctrl-G> + line number.  This should bring you to
the rule that is giving you a problem.

Joe Lawson

-----Original Message-----
From: Dr_Jung
To: Mike Tavares
Cc: snort-users () lists sourceforge net
Sent: 7/22/01 5:22 PM
Subject: Re: [Snort-users] Error message that has me completely stumped

Mike Tavares wrote:
> So I be the newbie with this product.  I am trying to get it
configured and
> am getting this error message regardless of what rule I try.
>
> Can anyone offer any advice.  The system is a Windows 2000 box.
>
> ERROR D:\Security\IDS\snort\rules\icmp.rules:4 => Port value missing
in
> rule!
>
> These are the default 1.7 rules, and I get this error message either
running
> Snort manually or from the IDScenter (1.08d)
>
> I know I missed some step along the way just not sure which one.
>
> Thanks for the help
> -Mike
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

Have you looked at your icmp.rule file to see if a port assignment is
missing from one of your statements?

Craig Woods
UNIX SA

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users