[Emerging-Sigs] [Fwd: SNORT FATAL ERROR]

Matt Jonkman jonkman at jonkmans.com
Tue Jan 13 11:13:39 EST 2009


To a degree, but it doesn't give a bad exit status when it finds a bad
sig, so not real useful in automation.

Matt

Joel Esler wrote:
> Isn't that what -T is for?
> 
> J
> 
> On Jan 13, 2009, at 11:01 AM, Michael Scheidell allegedly wrote:
> 
>>> Yes it does, why do you ask? :)
>>>
>>> Fixed up, thanks for letting me know!
>>>
>> Sure wish there was a 'lint' mode on snort.
>>
>> Snort 2.4* will crash with bad rules (and make log entry), snort  
>> 2.6* will
>> not do anything but disable the rule (no log, no error message,  
>> nothing)
>>
>> -- 
>> Michael Scheidell, CTO
>>> |SECNAP Network Security
>> Winner 2008 Network Products Guide Hot Companies
>> FreeBSD SpamAssassin Ports maintainer
>>
>>
>> _________________________________________________________________________
>> This email has been scanned and certified safe by SpammerTrap(r).
>> For Information please see http://www.secnap.com/products/spammertrap/
>> _________________________________________________________________________
>> _______________________________________________
>> Emerging-sigs mailing list
>> Emerging-sigs at emergingthreats.net
>> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
> 
> 
> --
> Joel Esler
>http://www.joelesler.net
>http://www.twitter.com/joelesler
> [m]
> 
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at emergingthreats.net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc




More information about the Emerging-sigs mailing list