Snort mailing list archives
Rules troubles in startup
From: Juan Pablo Villaverde <jpablo () spcom com ar>
Date: Wed, 26 Jun 2002 12:46:23 -0300
I'm using oinkmaster to update rules, and now I'm getting an error
when snort starts. It seems to be an invalid rule... this is the
error:
[!] ERROR .//web-cgi.rules(8) => Bad port number: "(msg:"WEB-CGI"
Fatal Error, Quitting..
If you have any clue about it, please tell me. Thanks.
The complete startup log:
Log directory = /var/log/snort
Initializing Network Interface ppp0
using config file /etc/snort.conf
Parsing Rules file /etc/snort.conf
No arguments to frag2 directive, setting defaults to:
Fragment timeout: 60 seconds
Fragment memory cap: 4194304 bytes
Stream4 config:
Stateful inspection: ACTIVE
Session statistics: INACTIVE
Session timeout: 30 seconds
Session memory cap: 8388608 bytes
State alerts: INACTIVE
Scan alerts: ACTIVE
Log Flushed Streams: INACTIVE
No arguments to stream4_reassemble, setting defaults:
Reassemble client: ACTIVE
Reassemble server: INACTIVE
Reassemble ports: 21 23 25 53 80 143 110 111 513
Reassembly alerts: ACTIVE
Reassembly method: FAVOR_OLD
[!] ERROR .//web-cgi.rules(8) => Bad port number: "(msg:"WEB-CGI"
Fatal Error, Quitting..
--
Juan Pablo Villaverde
Tec. en Infraestructura de Redes
Soluciones Punto Com S.A.
http://www.spcom.com.ar
-------------------------------------------------------
This sf.net email is sponsored by: Jabber Inc.
Don't miss the IM event of the season | Special offer for OSDN members!
JabberConf 2002, Aug. 20-22, Keystone, CO http://www.jabberconf.com/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Which rules to use for snort ? Ronald Nutter (Jun 02)
- Re: Which rules to use for snort ? matt (Jun 03)
- Rules troubles in startup Juan Pablo Villaverde (Jun 26)
- Re: Rules troubles in startup steveg (Jun 26)
- Rules troubles in startup Juan Pablo Villaverde (Jun 26)
- Re: Which rules to use for snort ? John Sage (Jun 03)
- <Possible follow-ups>
- RE: Which rules to use for snort ? Ronald Nutter (Jun 03)
- Re: Which rules to use for snort ? matt (Jun 03)
