[Snort-users] ERROR WITH VIRUS.RULES

EPenove nsl at ...953...
Mon Feb 4 08:47:03 EST 2002


i have the same pb : i download this file : 
/downloads/snortrules.tar.gz & put it in the /etc/snort/

& now i download : /downloads/snort-daily.tar.gz et put the rules directory 
in the /etc/snort/ 

but i have the same error ..... !!!!!

Manu 


On Monday 04 February 2002 17:26, Chris Grout wrote:
> You need to copy over the new classification.config into your rules
> directory.  If you are using the 'snort-daily.tar.gz', its in the ./etc
> directory.
>
> Chris
>
> -----Original Message-----
> From: snort-users-admin at lists.sourceforge.net
> [mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of EPenove
> Sent: Monday, February 04, 2002 7:45 AM
> To: snort-users at lists.sourceforge.net
> Subject: [Snort-users] ERROR WITH VIRUS.RULES
>
>
> Hello ,
>
> i have this error when i load "snort -b -A full -c virus.rules"
>
> +++++++++++++++++++++++++++++++++++++++++++++++++++++
> ERROR /etc/snort/virus.rules(86) => Bad Priority setting "misc-activity"
> ERROR /etc/snort/virus.rules(87) => Bad Priority setting "misc-activity"
> ERROR /etc/snort/virus.rules(88) => Bad Priority setting "misc-activity"
> ERROR /etc/snort/virus.rules(89) => Bad Priority setting "misc-activity"
> ERROR /etc/snort/virus.rules(90) => Bad Priority setting "misc-activity"
> ERROR /etc/snort/virus.rules(91) => Bad Priority setting "misc-activity"
> ERROR /etc/snort/virus.rules(92) => Bad Priority setting "misc-activity"
> ERROR /etc/snort/virus.rules(93) => Bad Priority setting "misc-activity"
> ERROR /etc/snort/virus.rules(94) => Bad Priority setting "misc-activity"
> ERROR /etc/snort/virus.rules(95) => Bad Priority setting "misc-activity"
> 82 Snort rules read...
> 82 Option Chains linked into 4 Chain Headers
> 0 Dynamic rules
> +++++++++++++++++++++++++++++++++++++++++++++++++++
>
> why there is this error on the file ????
>
> thanks for all and ................... be protected !!!!

-- 
Manu Penove - T-SIT
- Web site : http://www.lookit.org -
- "C'est beau si ça passait" : JBT -




More information about the Snort-users mailing list