Correction, snort -T -c rulestotest.conf *does* show an error, it's just
that classification errors aren't a showstopper. We will now include a
check for "Bad Priority setting" error messages when running snort -T on a
potential rules export. Sorry about letting it slip before.
Max

On Tue, 5 Jun 2001, Max Vision wrote:
> The relay-or-info-attept classification was accidentally omitted until one
> of the updates on May 31st, so it has only been fixed for about a week.
> Thanks to Roeland Weve for reporting the omission.
>
> Also the 'snort -T -c rulestotest.conf' doesn't notice if a classfication
> is missing. I had seen:
> "Snort sucessfully loaded all rules and checked all rule chains!"
>
> Max
>
> On Tue, 5 Jun 2001, François Désarménien wrote:
> > Mon, 4 Jun 2001 15:48:21 +0530
> > "Sid" <s_i_d_jyahoo.com> wrote:
> >
> > > Hi,
> > >
> > > I know i've missed something but the vision18.conf i downloaded from
> > > whitehats.com doesn't work. It gives a lot of errors while starting snort
> > > about bad rules. I think its the classification. Anyway, whats the way out??
> > >
> >
> > Yes, you're right : there's a problem with rule #436 which is classified as
> > 'relay-or-info-attempt' that doesn't exist in the classification rules.
> >
> > Either change its tag, add new classification or comment out the rule to have
> > it load. First option seems to me to be the best. Having done that, it works
> > perfectly for me with 1.8beta4.
> >
> > François
> >
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-userslists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list
>

_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]