Re: snort core dumping SOLUTION

["Leonardo Rodrigues" <coelho () persogo com br>]

    Wow ..... sorry ..... seems its not a snort problem, its mine
problem :)

    snort.conf rules were wrong, they were:

log tcp any any -> any 80 (MSG"HTTP";logto:"http.log";)
log tcp any 80 -> any any (MSG"HTTP";logto:"http.log";)

    You could notice its missing the ':' right after MSG .... included
that and snort loads fine !!

    Thanks for all answers ...

    Suggestion for developers .... shouldnt snort parse rules and simply
ignore errors, without core dumping ????

    Sincerily,
    Leonardo Rodrigues


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users