[Snort-users] Current Rule Set

Elinus Liga elinus at ...6054...
Wed Jun 12 04:36:04 EDT 2002


I am using RH7.2 and snort-1.8.6, and when I insert wrong syntax rules ,
Snort will log error in /var/log/messages.
It should tell you which rule & line number.
This is just my sample:
Jun 12 19:25:34 RH72 snort: FATAL ERROR:  ERROR: /etc/snort/virus.rules(97)
=> Unknown keyword "resp" in rule!

Rgds,
Liga

----- Original Message -----
From: "Hall, Duane" <hallu at ...4888...>
To: "Snort Userslist" <snort-users at lists.sourceforge.net>
Sent: Tuesday, June 11, 2002 5:49 AM
Subject: [Snort-users] Current Rule Set


I just loaded the current rule set and am getting rule errors when
loading snort.  Is there any way for snort to tell me which rules are
having errors?  It tells me that there are bad ports.

Duane


**************************
Duane Hall
Security Administrator
Hastings Entertainment, Inc.
806-351-2300 X-3945







More information about the Snort-users mailing list