[Snort-users] Progress..New Ruleset not working with Snort 1.7

Fyodor fygrave at ...121...
Thu Apr 12 17:57:50 EDT 2001


 
> It seems as though my first problem is solved, however now I'm getting:
> 
> intruder# snort -d -e -l /usr/snortlogs -v -c /usr/jmagee/snort*7/snort.conf -D -i xl0
> Initializing daemon mode
> intruder# Apr 12 02:31:42 intruder snort: [!] ERROR smtp.rules(7) => Bad port number: "(msg:"SMTP" 
> Apr 12 02:31:42 intruder snort: [!] ERROR smtp.rules(7) => Bad port number: "(msg:"SMTP" 
> 
> Do I have to define SMTP somewhere?
> 

yep, you have to define $SMTP as an ip address (or a list of IP addresses) of your mail server(s).




More information about the Snort-users mailing list