Snort mailing list archives

Re: The System works !! one question please !


From: "Alex Butcher, ISC/ISYS" <Alex.Butcher () bristol ac uk>
Date: Mon, 20 Sep 2004 14:13:23 +0100



--On 20 September 2004 13:08 +0300 Juan Fernandez <Juan.Fernandez () deltathree com> wrote:

I tried to insert all of my http servers in HTTP_SERVERS in snort.conf (I
have a 99 servers).

Before modifying the https servers it worked.

DO I have a limitation of ip to enter ( I cant find any syntax error).

It looks like Snort's configuration file parser has a maximum line length of 1024 characters (defined by STD_BUF in src/snort.h). To (try to) change this, you'll need to modify that definition in snort.h and rebuild.

Alternatively, a workaround would be to define two or more variables, and duplicate the signatures that use HTTP_SERVERS.

HTH,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: