[Snort-users] snort core dumping SOLUTION

Leonardo Rodrigues coelho at ...3917...
Fri Oct 26 10:19:02 EDT 2001


    Wow ..... sorry ..... seems its not a snort problem, its mine
problem :)

    snort.conf rules were wrong, they were:

log tcp any any -> any 80 (MSG"HTTP";logto:"http.log";)
log tcp any 80 -> any any (MSG"HTTP";logto:"http.log";)

    You could notice its missing the ':' right after MSG .... included
that and snort loads fine !!

    Thanks for all answers ...

    Suggestion for developers .... shouldnt snort parse rules and simply
ignore errors, without core dumping ????

    Sincerily,
    Leonardo Rodrigues





More information about the Snort-users mailing list