[Snort-sigs] Bleeding rules virus and threshold issue

James Lay jlay at ...2844...
Sat Feb 19 07:32:10 EST 2005


Hey folks!

Just upgraded to 2.3.0 and here's what I get with 

Feb 19 08:22:43 ns1 snort: FATAL ERROR: Rule-Threshold-Parse: could not
create a threshold object -- only one per sid, sid = 2001578
Feb 19 08:24:19 ns1 snort: FATAL ERROR: Rule-Threshold-Parse: could not
create a threshold object -- only one per sid, sid = 2001573

after nuking all entries in bleeding-virus.rules with "threshold: type
limit" in them snort would fire up.  Any thoughts on this?

James Lay
Network Manager/Security Officer
AmeriBen Solutions/IEC Group
Semper Vigilans!!!





More information about the Snort-sigs mailing list