[Snort-users] bad priority messages

Mipam mipam at ...266...
Sun Mar 24 16:13:02 EST 2002


Hi,

When im starting snort-1.8.4 im getting these mesages:

Mar 25 01:02:31  snort: ERROR snort_icmp.conf(103) => Bad Priority
setting "attempted-recon"
Mar 25 01:02:31  snort: ERROR snort_icmp.conf(108) => Bad Priority
setting "bad-unknown"
Mar 25 01:02:31  snort: ERROR snort_icmp.conf(115) => Bad Priority
setting "misc-activity"

I just the icmp.rules default file with entries like these:

alert icmp $EXTERNAL_NET any -> $HOME_NET any (msg:"ICMP ISS Pinger"; content:"|
495353504e475251|";itype:8;depth:32; reference:arachnids,158; classtype:attempte
d-recon; sid:465; rev:1;)

Any hints?
Bye,

Mipam.




More information about the Snort-users mailing list