[Snort-users] Snort Error (Newbie Alert)
rstaaf at ...1457...
Tue Mar 6 14:34:07 EST 2001
I downloaded the latest full breakout again and the error is gone.
----- Original Message -----
From: "Brian Caswell" <bmc at ...312...>
To: "Bob Staaf" <rstaaf at ...1457...>
Cc: <Snort-users at lists.sourceforge.net>
Sent: Tuesday, March 06, 2001 12:52 PM
Subject: Re: [Snort-users] Snort Error (Newbie Alert)
> Bob Staaf wrote:
> > Have successfully got snort 1.7 running on my Red Hat 6.2 server
> > now trying to get the latest rules running. I am getting the following
> > error when my server starts up snortd. Any ideas?
> > Mar 6 11:44:45 swshost snort: [!] ERROR
> > => Bad port number: "(msg:"EXPLOIT"
> Are you sure you setup $HOME_NET, $SMTP, $EXTERNAL_NET correctly? I
> just checked the latest ruleset again, and none of the exploit.rules are
> missing a port number. In the initial release of the new rules, there
> was a few broken rules that snuck through the cracks. (Sorry about
> that) I thought we caught most of them and fixed them. I checked them
> again, and couldn't find any without a DEST port.
> Try downloading the full breakout again. If you find a flawed rule,
> look at the line number of that file and e-mail it to me.
> Brian Caswell
> The MITRE Corporation
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
More information about the Snort-users