[Snort-users] Snort questions

Martin Roesch roesch at ...421...
Mon Mar 12 01:41:55 EST 2001


Read the BUGS file, send us more info.  Show us your rules file.  I know
that "flags: A+;" works properly on every platform I have available,
something else must be going wrong.

   -Marty

"Dale J. Chatham" wrote:
> 
> I'm trying to get two things to work, snort is 1.7.
> 
> I'm getting errors on "flags: A+" in the snort configuration files.  It's
> choking on the "+".
> 
> Also, I would like to define INTERNAL as a variable to be a 4 bit subnet,
> minus one machine.
> 
> It seems that it would be done thusly:
> 
> var INTERNAL [207.8.2.64/28,!207.8.2.75/32]
> 
> IT dies on that as well.
> 
> Any words of wisdom?
> 
> --
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users

--
Martin Roesch
roesch at ...421...
http://www.snort.org




More information about the Snort-users mailing list