[Snort-users] snort core dumping SOLUTION
coelho at ...3917...
Fri Oct 26 10:19:02 EDT 2001
Wow ..... sorry ..... seems its not a snort problem, its mine
snort.conf rules were wrong, they were:
log tcp any any -> any 80 (MSG"HTTP";logto:"http.log";)
log tcp any 80 -> any any (MSG"HTTP";logto:"http.log";)
You could notice its missing the ':' right after MSG .... included
that and snort loads fine !!
Thanks for all answers ...
Suggestion for developers .... shouldnt snort parse rules and simply
ignore errors, without core dumping ????
More information about the Snort-users