cb, those look fine. capture exl are very picky with white space.
there needs to go only one tab between the columns. can you verify if
this is the case. if it is, could you send me your exl files?
christian
---
Web: http://www.mcs.vuw.ac.nz/~cseifert
On Jun 5, 2008, at 2:32 PM, "Critical Bill" <[EMAIL PROTECTED]>
wrote:
Christian,
Here's the error I'm receiving,
Option added: client-default-visit-time => 30
Option added: collect-modified-files => true
Option added: p_m => 0.019
Option added: send-exclusion-lists => true
ExclusionList: WARNING Error in exclusion list, line 101 in
FileMonitor.exl
ExclusionList: WARNING Error in exclusion list, line 102 in
FileMonitor.exl
ExclusionList added: for file monitor
ExclusionList added: for process monitor
ExclusionList added: for registry monitor
I've tried the following formats unsuccessfully
=====================
+ Write C:\\Program Files\\Internet Explorer\\iexplore
\.exe C:\\Documents and Settings\\.+\\Local Settings\\Temp\\ICD1.t
mp\\.+
+ Delete C:\\Program Files\\Internet Explorer\\iexplore
\.exe C:\\Documents and Settings\\.+\\Local Settings\\Temp\\ICD1.t
mp\\.+
=====================
+ Write C:\\Program Files\\Internet Explorer\\iexplore
\.exe C:\\Documents and Settings\\.+\\Local Settings\\Temp\\.+\
\swflash.inf
+ Delete C:\\Program Files\\Internet Explorer\\iexplore
\.exe C:\\Documents and Settings\\.+\\Local Settings\\Temp\\.+\
\swflash.inf
=====================
Thanks for your help.
_______________________________________________
Capture-HPC mailing list
Capture-HPC@public.honeynet.org
https://public.honeynet.org/mailman/listinfo/capture-hpc
_______________________________________________
Capture-HPC mailing list
Capture-HPC@public.honeynet.org
https://public.honeynet.org/mailman/listinfo/capture-hpc
