Snort mailing list archives
Re: rules errors
From: Matt Kettler <mkettler () evi-inc com>
Date: Fri, 08 Aug 2003 11:59:42 -0400
At 01:22 PM 8/7/2003 -0400, Sheahan, Paul wrote:
Just downloaded snortrules-stable and the comment on the site says "works for 1.9.x". I'm running Snort Version 1.9.0 (Build 209) on Linux. Yet after installing the rules I get these errors when starting Snort:
I think that's a bug where the website hasn't been updated. Snort 1.9.x is no longer the "stable" version. it's 2.x..
It should also be noted that you must be sure to not use stream4 in 1.9.x. It is vulnerable to remote exploit for arbitrary code execution in the context of whatever user snort runs as (root by default).
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- rules errors Sheahan, Paul (Aug 07)
- Re: rules errors Erek Adams (Aug 07)
- <Possible follow-ups>
- Re: rules errors Matt Kettler (Aug 08)