[Snort-users] Snort 1.8-beta3 (Build 12) and recent rules

Brian Caswell bmc at ...312...
Wed Apr 25 08:30:58 EDT 2001


Ralf Hildebrandt wrote:
> I tried to run Snort 1.8-beta3 (Build 12) with the rules from
> http://www.snort.org/Files/snortrules-8.tar.gz
> but I get:
> 
> ERROR rules.new/scan.rules(6) => Bad Priority setting "attempted-recon"
> ERROR rules.new/scan.rules(7) => Bad Priority setting "attempted-recon"
> etc.

do you have your classification.config included in your snort.conf?

you must have all of the classifications specified somewhere, or
sp_priority will bitch.

-brian




More information about the Snort-users mailing list