Re: Stable Snort Rules fails?

[Erek Adams <erek () theadamsfamily net>]

On Fri, 31 May 2002, Juan Pablo Villaverde wrote:

> I have installed Snort 1.8.6 build 151, when I download the stable
> rules from snort:
> (http://www.snort.org/dl/signatures/snortrules.tar.gz)
>
> I get the following error:
>
> ERROR .//bad-traffic.rules(19) => Bad protocol name ">134"
> Fatal Error, Quitting..
>
> This rule must be OK... but fails!! Why?

Errr...  I just grabbed the same file.  That rule is #19, and it's commented
out along with #20.

-- 

# alert ip $EXTERNAL_NET any -> $HOME_NET any (msg:"BAD TRAFFIC
Unassigned/Reser ved IP protocol"; ip_proto:>134;
classtype:non-standard-protocol; sid:1627;  rev: 1;)

--

Usually if a rule is commented out in the rules distro, it was done for a
reason. :)

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users