http://qa.mandrakesoft.com/show_bug.cgi?id=3863
[EMAIL PROTECTED] changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |bugzilla-
| |[EMAIL PROTECTED]
Status|RESOLVED |VERIFIED
------- Additional Comments From [EMAIL PROTECTED] 2003-22-06 21:43 -------
Multiple submission
verified duplicate
--
Configure bugmail: http://qa.mandrakesoft.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
------- Reminder: -------
assigned_to: [EMAIL PROTECTED]
status: VERIFIED
creation_date:
description:
There is a typo in file: /etc/snort/rules/deleted.rules
alert udp $EXTERNAL_NET 4120 -> $HOME_NET any (msg:"BACKDOOR DeepThroat access";
content: "--Ahhhhhhhhhh"; reference:arachnids,405; sid:113; classtype:misc-act
ivity; rev:4;)
There is one space in "act ivity", snort will not start due to this typo, the
correct line is below:
alert udp $EXTERNAL_NET 4120 -> $HOME_NET any (msg:"BACKDOOR DeepThroat access";
content: "--Ahhhhhhhhhh"; reference:arachnids,405; sid:113;
classtype:misc-activity; rev:4;)
Linux-phased, Mandrake Soft Support
