http://qa.mandrakesoft.com/show_bug.cgi?id=3863
Product: snort
Component: snort
Summary: Bad config file, prevents start !!!!
Product: snort
Version: 2.0.0-2mdk
Platform: PC
OS/Version: All
Status: RESOLVED
Severity: blocker
Priority: P2
Component: snort
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
There is a typo in file: /etc/snort/rules/deleted.rules
alert udp $EXTERNAL_NET 4120 -> $HOME_NET any (msg:"BACKDOOR DeepThroat access";
content: "--Ahhhhhhhhhh"; reference:arachnids,405; sid:113; classtype:misc-act
ivity; rev:4;)
There is one space in "act ivity", snort will not start due to this typo, the
correct line is below:
alert udp $EXTERNAL_NET 4120 -> $HOME_NET any (msg:"BACKDOOR DeepThroat access";
content: "--Ahhhhhhhhhh"; reference:arachnids,405; sid:113;
classtype:misc-activity; rev:4;)
Linux-phased, Mandrake Soft Support
------- Additional Comments From [EMAIL PROTECTED] 2003-22-06 21:41 -------
*** This bug has been marked as a duplicate of 3864 ***
--
Configure bugmail: http://qa.mandrakesoft.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
