[Snort-users] help please

Erek Adams erek at ...577...
Thu Sep 27 07:32:03 EDT 2001


On Thu, 27 Sep 2001, d'Ambly, Jeff wrote:

> Hey thanks, dmearc was overwriting my config, but now I get this error when
> I start snort

Ok, cool!  I now I'm not so confused. :)

> ERROR /usr/local/demarc/conf/policy.rules(29) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(30) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(31) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(32) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(33) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(34) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(35) => Bad Priority setting
> "bad-unknown"
> ERROR /usr/local/demarc/conf/policy.rules(36) => Bad Priority setting
> "bad-unknown"

Make sure you have the lines:

 # Include classification & priority settings
 include classification.config

In snort.conf.  Then make sure you have:

 config classification: bad-unknown,Potentially Bad Traffic, 2

in that file.  At that point, all should be well.

Hope that helps!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net





More information about the Snort-users mailing list