Snort mailing list archives
Re: snort crash using some rules
From: Joel Esler <joel.esler () sourcefire com>
Date: Wed, 28 Mar 2007 08:58:44 -0400
I am running all these rulesets and they all work for me.What do you mean crash? What is the error you are getting in your / var/log/messages file?
+---------------------------------------------------------------------+ Joel Esler Security Consultant gpg key: http://demo.sourcefire.com/jesler.pgp.key +---------------------------------------------------------------------+ On Mar 28, 2007, at 4:14 AM, Josep Pujadas i Jubany wrote:
Hello!I'm newbie using snort. I installed last version and adjusted snort.conf forusing more rules. I found that some rules originated a snort crash. Rules with problems are: # include $RULE_PATH/backdoor.rules # include $RULE_PATH/chat.rules # include $RULE_PATH/p2p.rules # include $RULE_PATH/spyware-put.rules # include $RULE_PATH/community/community-bot.rules # include $RULE_PATH/community/community-misc.rules # include $RULE_PATH/community/community-sip.rules # include $RULE_PATH/community/community-virus.rules # include $RULE_PATH/community/community-web-misc.rules snort-2.6.1.3 running on a FreeBSD 6.2 machine Is it normal? Any ideas? Thanks in advance, Josep Pujadas---------------------------------------------------------------------- ---Take Surveys. Earn Cash. Influence the Future of ITJoin SourceForge.net's Techsay panel and you'll get the chance to share youropinions on IT & business topics through brief surveys-and earn cashhttp://www.techsay.com/default.php? page=join.php&p=sourceforge&CID=DEVDEV_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort crash using some rules Josep Pujadas i Jubany (Mar 28)
- Re: snort crash using some rules Joel Esler (Mar 28)
- Message not available
- Message not available
- Fw: Re: snort crash using some rules Josep Pujadas i Jubany (Mar 28)
- Message not available
- <Possible follow-ups>
- Fwd: snort crash using some rules Joel Esler (Mar 28)