[Snort-sigs] receiving an error msg on a signature

nick nelson snelson at ...1248...
Tue Feb 4 16:27:01 EST 2003


Greetings everyone..

The signature is used (or hopefully will be used..) to detect 
incoming xdcc send requests.

Can anyone offer suggestions on the following error : 

I'm using snort 1.9, 

ERROR snort.conf Line 593 => ParsePattern Got Null enclosed in 
quotation 
marks (")!
Fatal Error, Quitting..


alert tcp $EXTERNAL_NET 6660:7000 -> $HOME_NET any (msg:"Incoming 
XDCC Send Request Detected"; flow:to_server,established; content:" 
:^AXDCC *[Ss][Ee][Nn][Dd] *#[0-9]" ; nocase; offset:0; classtype:misc-
activity;)

Thanks in advance..

-nick
Valdosta State University, OIT




More information about the Snort-sigs mailing list