RE: new install rules question - solaris

["larosa, vjay" <larosa_vjay () emc com>]

Try this command.

snort -h 192.168.1.0/24 -s blame_cmg  -D 'net 192.168.1'

Maybe you need the single quotes around the Pcap filter?

vjl

-----Original Message-----
From: Dan Gahlinger [mailto:deg () interlynx net]
Sent: Wednesday, November 06, 2002 12:54 PM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] new install rules question - solaris


Well snort core dumps still, so, I'm still waiting for someone to let me
know what I should be doing here to fix this...

Dan.
At 05:00 PM 11/5/2002 -0500, you wrote:
> Dan Gahlinger <deg () interlynx net> writes:
>
> > -D still doesnt do anything, no matter where i put it
> > unless I put it at the end of the command line, like:
> > snort -h 192.168.1.0/24 -s blame_cmg net 192.168.1 -D
> > then I get:
> > ERROR: OpenPcap() FSM compilation failed:
> >          parse error
> > PCAP command: net 192.168.1 -D
> > Fatal Error, Quitting..
>
> snort -h 192.168.1.0/24 -s blame_cmg  -D net 192.168.1




-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users