[Snort-users] FYI

Matt Jonkman jonkman at ...4024...
Fri Oct 17 12:16:29 EDT 2008


Sorry, didn't see the post about it over here. It's fixed, can you
verify for me?

And ya, moving toward automated testing of these sigs. The
auto-generated ones (botcc, dshield, etc) are generally excluded from
the existing testing. Remedying that.

Thanks

Matt

Matt Olney wrote:
> This is an error in the ET rule set.  They hang out here, so they  
> should be able to sort it out soon.
> 
> Matt
> 
> On Oct 17, 2008, at 9:15 AM, James Lay <jlay at ...13475...> wrote:
> 
>> FWIW
>>
>> FW: Oct 17 06:02:46 bpagateway snort[26838]: FATAL ERROR:
>> /chroot/snort/etc/snort/rules/emerging-botcc.rules(59) => Empty IP  
>> used
>> either as source IP or as destination IP in a rule. IP list: [].
>>
>>
>>
>>
>> --- 
>> ----------------------------------------------------------------------
>> This SF.Net email is sponsored by the Moblin Your Move Developer's  
>> challenge
>> Build the coolest Linux based applications with Moblin SDK & win  
>> great prizes
>> Grand prize is a trip for two to an Open Source event anywhere in  
>> the world
>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc






More information about the Snort-users mailing list