Snort mailing list archives

RE: Whitehats rules don't work


From: "Caruso, Ken" <ken.caruso () fsbti com>
Date: Mon, 4 Jun 2001 13:11:33 -0700


Hard to say without seeing the errors, but I will tell you what gave me a
headache the first time I tried. Downloading the rules from my windows
machine and then doing a "binary" ftp to a unix system, which screws up the
newline characters and then the rule file cant be read correctly. If this is
what you are doing, use ASCII.

Ken

-----Original Message-----
From: Max Vision [mailto:vision () whitehats com]
Sent: Monday, June 04, 2001 9:14 AM
To: Sid
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Whitehats rules don't work


Every release is run through the rules parser without errors, so there may
be something specific to your environment.  Please send your error message
to info () whitehats com or the forums and someone will help you get it going
:)

Thanks,
Max

On Mon, 4 Jun 2001, Sid wrote:

Hi,

I know i've missed something but the vision18.conf i downloaded from
whitehats.com doesn't work. It gives a lot of errors while starting snort
about bad rules. I think its the classification. Anyway, whats the way
out??

TIA,

Siddhartha



_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: