[Snort-users] ERROR: Undefined variable name: (/etc/snort/rules/bad-traffic.rules:12): EXTERNAL_NET

Paul Schmehl pauls at ...6838...
Mon Apr 11 09:41:44 EDT 2005


--On Saturday, April 09, 2005 06:24:38 PM +0900 Mark Sargent 
<powderkeg at ...11462...> wrote:

> Hi All,
>
> anyone seen this error b4..? I've checked my snort.conf file and
> confirmed that the rules path = /etc/snort/rules,
>
[snip]
>
> [root at ...274... snort]# /usr/local/bin/snort -c /etc/snort/snort.conf -i
> eth0 -g snort
>
[snip]
>
> ERROR: Undefined variable name: (/etc/snort/rules/bad-traffic.rules:12):
> EXTERNAL_NET
> Fatal Error, Quitting..
>
Look in bad-traffic.rules.  You will probably find a rule there that uses 
"EXTERNAL_NET" instead of "$EXTERNAL_NET".  IOW, a type.  Or, you haven't 
defined EXTERNAL_NET in your snort.conf file.

Paul Schmehl (pauls at ...6838...)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu




More information about the Snort-users mailing list