[Snort-users] Snort questions

Dale J. Chatham dale at ...1529...
Sun Mar 11 14:42:32 EST 2001


I'm trying to get two things to work, snort is 1.7.

I'm getting errors on "flags: A+" in the snort configuration files.  It's
choking on the "+".

Also, I would like to define INTERNAL as a variable to be a 4 bit subnet,
minus one machine.

It seems that it would be done thusly:

var INTERNAL [207.8.2.64/28,!207.8.2.75/32]

IT dies on that as well.

Any words of wisdom?

-- 





More information about the Snort-users mailing list