[Snort-sigs] rules problem relating to offset?

From: Kreimendahl, Chad J <Chad.Kreimendahl(at)umb.com>
Date: Mon Mar 31 2003 - 16:12:02 EST

With the most recent build of snort.

FATAL ERROR: snort.conf (858): Unable to parse as offset value string

and... line 858 is:

alert tcp $EXTERNAL_NET any -> $HOME_NET 143 (msg:"IMAP list overflow attempt"; flow:established,to_server; content:" LIST |22 22| { "; nocase; byte_test:5,>,256,string,dec,relative; reference:nessus,10374; reference:cve,CAN-2000-0284; classtype:misc-attack; sid:18
45; rev:6;)

---

This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Mon Mar 31 16:49:42 2003