Re: ERROR: ERROR /snortcenter/rules/snort.eth0.conf (88): Bad arguments to byte_test:

[Paul Schmehl <pauls () utdallas edu>]

--On Friday, December 19, 2003 20:46:32 -0500 Brian Toovey 
<admin () zionsecure com> wrote:

> I have seen this posted, but does anybody know the solution yet?

The solution is staring you in the face.

[snipped all the irrelevant lines]

> ERROR: ERROR /snortcenter/rules/snort.eth0.conf (88): Bad arguments to
> byte_test:

You have a rule that uses "byte_test" and has bad arguments supplied to it. 
Grep for "byte_test" in your rules files and compare the results to the 
proper argumentation for byte_test.  (I would start with any custom rules 
that you've written, since it's unlikely that the rules supplied with snort 
with have this problem and go unnoticed by the community.)

You can find the section explaining byte_test in section 2.5.11 in the 
snort manual, which is available on the website as well as supplied with 
the tarball.  (Look in /doc/SnortUsersManual.pdf).  If you installed from 
an rpm or ports collection, download the tarball and untar it somewhere. 
You should have the manual available for ready reference anyway.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users