RE: Snort-Swatch

["Keaton, Lindamaria" <LKeaton () unionsafe com>]

Ok, I've been looking at the alert.conf file majority of the day. I took
a care of the memory error I was getting now I'm getting this error.

# logsurfer -c /usr/local/etc/alert.conf

open without context in rule: '\[Classification: (.*)\] \[Priority: 1\]'
- - - 0 open
config error arround line 8: '\[Classification: (.*)\] \[Priority: 1\]'
- - - 0 open


Any ideas?


-----Original Message-----
From: Edin Dizdarevic [mailto:edin.dizdarevic () interActive-Systems de] 
Sent: Saturday, September 27, 2003 1:55 AM
To: Keaton, Lindamaria
Cc: jon baer; snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort-Swatch


Hi,

Keaton, Lindamaria wrote:

> Do you have a start-up script for this?
>
> logsurfer -c /etc/logsurfer/alert.conf \
>            -d /etc/logsurfer/alert.dump \
>            -p /var/run/logsurfer_alert.pid \
>            -f /var/log/snort/alert

yes if you promise me to read this:

http://learn.to/quote

;)

It is quite big since it's starting several logsurfer instances - for
every essential service one. Are you sure you wanna have it? How are
your shell programming skills?

Regards,
Edin

> -----Original Message-----
> From: Edin Dizdarevic [mailto:edin.dizdarevic () interActive-Systems de]
[...]


-- 
Edin Dizdarevic



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users