Snort mailing list archives
RE: Whitehats rules don't work
From: "Caruso, Ken" <ken.caruso () fsbti com>
Date: Mon, 4 Jun 2001 13:11:33 -0700
Hard to say without seeing the errors, but I will tell you what gave me a headache the first time I tried. Downloading the rules from my windows machine and then doing a "binary" ftp to a unix system, which screws up the newline characters and then the rule file cant be read correctly. If this is what you are doing, use ASCII. Ken -----Original Message----- From: Max Vision [mailto:vision () whitehats com] Sent: Monday, June 04, 2001 9:14 AM To: Sid Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Whitehats rules don't work Every release is run through the rules parser without errors, so there may be something specific to your environment. Please send your error message to info () whitehats com or the forums and someone will help you get it going :) Thanks, Max On Mon, 4 Jun 2001, Sid wrote:
Hi, I know i've missed something but the vision18.conf i downloaded from whitehats.com doesn't work. It gives a lot of errors while starting snort about bad rules. I think its the classification. Anyway, whats the way
out??
TIA, Siddhartha _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Whitehats rules don't work Sid (Jun 04)
- Re: Whitehats rules don't work Chris Green (Jun 04)
- Re: Whitehats rules don't work Max Vision (Jun 04)
- Re: Whitehats rules don't work François Désarménien (Jun 05)
- Whitehats rules work :) (was Re: Whitehats rules don't work) Max Vision (Jun 05)
- Re: Whitehats rules work :) (was Re: Whitehats rules don't work) Max Vision (Jun 05)
- Whitehats rules work :) (was Re: Whitehats rules don't work) Max Vision (Jun 05)
- <Possible follow-ups>
- RE: Whitehats rules don't work Ginnetty, James (Jun 04)
- RE: Whitehats rules don't work Caruso, Ken (Jun 04)
- Fw: Whitehats rules don't work Sid (Jun 04)
- Re: Fw: Whitehats rules don't work Phil Wood (Jun 05)