[Snort-users] Bad Priority Setting

Phil Wood cpw at ...440...
Tue Jan 8 11:11:06 EST 2002


See your classification.{config.vision} files [depending of if you are using
vision rules or snort rules].  Sounds like your rule sets are out of sync
with the version of snort you are running.

Also, make sure your all your var definitions match up with the "var's" used
in your rules.  Like, is it HOME_NET, or is it HOMENET, or is it INTERNAL?

On Tue, Jan 08, 2002 at 12:23:59PM -0500, J. J. Horner wrote:
> I've looked at the FAQ and in the archives back a month or so and I 
> can't find an answer to this:
> 
> I'm getting a great deal of entries in syslog reporting a lot of 
> the snort-current rules as having a Bad Priority setting.  Am I missing
> something in my configuration or is this somewhat normal?
> 
> Thanks
> JJ
> 
> -- 
> J. J. Horner
> "H*","6a686f726e657240326a6e6574776f726b732e636f6d"
> ***************************************************
> "H*","6a6a686f726e65724062656c6c736f7574682e6e6574"
> 
> Freedom is an all-or-nothing proposition:  either we 
> are completely free, or we are subjects of a
> tyrannical system.  If we lose one freedom in a
> thousand, we become completely subjugated.



-- 
Phil Wood, cpw at ...440...





More information about the Snort-users mailing list