Snort mailing list archives
FATAL ERROR when add resp: rst_all;
From: crazy mand <crazymand2001 () yahoo com>
Date: Sat, 23 Feb 2002 12:10:58 -0800 (PST)
I'm having a problems with snort when add resp: rst_all to some rules.. FATAL ERROR: ERROR: cannot open raw socket for libnet, exiting... Here's the rule: var RESP_ALL resp:rst_all,icmp_all; alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS 80 (msg:"WEB-IIS webdav file lock attempt"; flags:A+; content:"LOCK "; offset:0; depth:5; reference:bugtraq,2736; classtype:web-application-activity; sid:969; rev:1; $RESP_ALL;) Does anyone have any idea why and how to get it work? Thanks for any help! __________________________________________________ Do You Yahoo!? Yahoo! Sports - Coverage of the 2002 Olympic Games http://sports.yahoo.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- FATAL ERROR when add resp: rst_all; crazy mand (Feb 23)
- Re: FATAL ERROR when add resp: rst_all; Chris Green (Feb 23)