[Snort-users] FATAL ERROR when add resp: rst_all;

crazy mand crazymand2001 at ...131...
Sat Feb 23 12:18:47 EST 2002


I'm having a problems with snort when add resp:
rst_all to some rules.. FATAL ERROR: ERROR: cannot
open raw socket for libnet, exiting...

Here's the rule: 
var RESP_ALL resp:rst_all,icmp_all;
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS 80
(msg:"WEB-IIS webdav file lock attempt"; flags:A+;
content:"LOCK "; offset:0; depth:5;
reference:bugtraq,2736;
classtype:web-application-activity; sid:969; rev:1;
$RESP_ALL;)


Does anyone have any idea why and how to get it work?

Thanks for any help!


__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com




More information about the Snort-users mailing list