Snort mailing list archives

FATAL ERROR when add resp: rst_all;


From: crazy mand <crazymand2001 () yahoo com>
Date: Sat, 23 Feb 2002 12:10:58 -0800 (PST)

I'm having a problems with snort when add resp:
rst_all to some rules.. FATAL ERROR: ERROR: cannot
open raw socket for libnet, exiting...

Here's the rule: 
var RESP_ALL resp:rst_all,icmp_all;
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS 80
(msg:"WEB-IIS webdav file lock attempt"; flags:A+;
content:"LOCK "; offset:0; depth:5;
reference:bugtraq,2736;
classtype:web-application-activity; sid:969; rev:1;
$RESP_ALL;)


Does anyone have any idea why and how to get it work?

Thanks for any help!


__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: