[Snort-users] Rules Errors

Turner Ryan S CONT KPWA TurnerRS at ...160...
Sun Mar 31 20:13:03 EST 2002


I ran into this problem also. The only way I could work around it was by
manually editing my rules files and taking out all references to "classtype:
(whatever) ;".

once I did that they worked fine without errors. Demarc has some weird stuff
where you can set priority settings on certain rules, and I tried using that
to set priorities but even then I would still get the error until I removed
all classtypes. I know lame fix, but I couldn't figure out how to get around
it any other way.

-----Original Message-----
From: Andrew Blevins [mailto:ABlevins at ...5433...]
Sent: Friday, March 29, 2002 11:59 AM
To: 'Snort Users'
Subject: [Snort-users] Rules Errors


Hey all,
Thanks for the help in getting rules up and running from Ryan Turner and
Michael Steele.
Now that snort is recognizing the rules files, which are the default ones
that come with installation (I didn't create them), it is saying that there
are "bad priority settings" in the rule (scan.rules).
It still says 25 rules loaded, but each one has errors.
Any ideas?

Blevins


_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list