Snort mailing list archives
RE: help please
From: Erek Adams <erek () theadamsfamily net>
Date: Thu, 27 Sep 2001 07:31:06 -0700 (PDT)
On Thu, 27 Sep 2001, d'Ambly, Jeff wrote:
Hey thanks, dmearc was overwriting my config, but now I get this error when I start snort
Ok, cool! I now I'm not so confused. :)
ERROR /usr/local/demarc/conf/policy.rules(29) => Bad Priority setting "bad-unknown" ERROR /usr/local/demarc/conf/policy.rules(30) => Bad Priority setting "bad-unknown" ERROR /usr/local/demarc/conf/policy.rules(31) => Bad Priority setting "bad-unknown" ERROR /usr/local/demarc/conf/policy.rules(32) => Bad Priority setting "bad-unknown" ERROR /usr/local/demarc/conf/policy.rules(33) => Bad Priority setting "bad-unknown" ERROR /usr/local/demarc/conf/policy.rules(34) => Bad Priority setting "bad-unknown" ERROR /usr/local/demarc/conf/policy.rules(35) => Bad Priority setting "bad-unknown" ERROR /usr/local/demarc/conf/policy.rules(36) => Bad Priority setting "bad-unknown"
Make sure you have the lines: # Include classification & priority settings include classification.config In snort.conf. Then make sure you have: config classification: bad-unknown,Potentially Bad Traffic, 2 in that file. At that point, all should be well. Hope that helps! ----- Erek Adams Nifty-Type-Guy TheAdamsFamily.Net _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- help please d'Ambly, Jeff (Sep 26)
- Re: help please Erek Adams (Sep 26)
- RE: help please John Berkers (Sep 26)
- <Possible follow-ups>
- RE: help please d'Ambly, Jeff (Sep 27)
- RE: help please Erek Adams (Sep 27)
- RE: help please d'Ambly, Jeff (Sep 27)
- RE: help please Erek Adams (Sep 27)
- Re: help please Erek Adams (Sep 26)