Snort mailing list archives

Re: 2.8.6 errors


From: Joel Esler <jesler () sourcefire com>
Date: Tue, 27 Apr 2010 12:59:42 -0400

Looks like you are using 2.8.5.3 SO rules with 2.8.6.0.

J


On Tue, Apr 27, 2010 at 12:54 PM, Bruce A. Sanders
<basanders () proobject com>wrote:

 Seeing the following errors on test startup (/usr/local/snort/bin/snort -c
/usr/local/snort/etc/snort.conf -A fast -l /data/ids/tcpdump -r
./Honeynet-RFP-iis.pcap):

- WARNING: Invalid content option in shared object rule: gid:3, sid:13308 :
Fast pattern offset and length cannot be greater than the length of the
pattern.  Rule will not be registered.

- DynamicPlugin: Rule [3:15470] not enabled in configuration, rule will not
be used.

- Segmentation fault


Any insight would be appreciated.

Bruce


------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-- 
Joel Esler
------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: