OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: François (francoisfdesar.net)
Date: Tue Jun 05 2001 - 02:25:43 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Mon, 4 Jun 2001 15:48:21 +0530
    "Sid" <s_i_d_jyahoo.com> wrote:

    > Hi,
    >
    > I know i've missed something but the vision18.conf i downloaded from
    > whitehats.com doesn't work. It gives a lot of errors while starting snort
    > about bad rules. I think its the classification. Anyway, whats the way out??
    >

    Yes, you're right : there's a problem with rule #436 which is classified as
    'relay-or-info-attempt' that doesn't exist in the classification rules.

    Either change its tag, add new classification or comment out the rule to have
    it load. First option seems to me to be the best. Having done that, it works
    perfectly for me with 1.8beta4.

    François

    _______________________________________________
    Snort-users mailing list
    Snort-userslists.sourceforge.net
    Go to this URL to change user options or unsubscribe:
    http://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users