RE: [Snort-users] Snort 2.1.0 rules won't update in SnortCenter

This is a discussion on RE: [Snort-users] Snort 2.1.0 rules won't update in SnortCenter within the Snort forums, part of the System Security and Security Related category; Jason, Have you thought of downgrading to Snort 2.0 until you get time? Didn't know if you lived ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 01-27-2004
Jeff Evenson
 
Posts: n/a
Default RE: [Snort-users] Snort 2.1.0 rules won't update in SnortCenter

Jason,
Have you thought of downgrading to Snort 2.0 until you get time? Didn't
know if you lived the pain of doing that or if it's no big deal.

jeff

-----Original Message-----
From: Jason Alexander [mailto:lists@itsecurity3.its.uiowa.edu]=20
Sent: Monday, January 26, 2004 4:37 PM
To: Jeff Evenson
Subject: Re: [Snort-users] Snort 2.1.0 rules won't update in SnortCenter

I'm not the best programer in the world either. I'm just trying to make=20
it work for myself in my free time. If I get it working I'll set it free
but I don't have a time line for a fix as I'm doing this in my limited
free time.

Jason


Jeff Evenson wrote:
> Great,
> I'd love to assist, but I'm not a programmer by trade. Thanks for the
> info.
> jeff
>=20
> -----Original Message-----
> From: Jason Alexander [mailto:lists@itsecurity3.its.uiowa.edu]=20
> Sent: Friday, January 23, 2004 9:25 AM
> To: Jeff Evenson
> Cc: snort-users@lists.sourceforge.net
> Subject: Re: [Snort-users] Snort 2.1.0 rules won't update in

SnortCenter
>=20
> Jeff,
>=20
> That's becasue SnortCenter doesn't know about all the rules changes in
> Snort 2.1. When you try to import some of the rules thare aren't

fields
> in the database that are needed and you get the SQL Error. It also=20
> doesn't know anything about some of the preprocessors.
>=20
> I'm currently working on trying to addapt Snort Center to work with
> 2.1 but my schedule has kept me away for the last couple of days=20
> (Beagle). If I get it working I'll post my revised code here
>=20
> Jason Alexander
> IT Security
> University of Iowa
>=20
> Jeff Evenson wrote:
>=20
>>I have been attempting to use SnortCenter to update rules via the=20
>>internet or file upload. I've changed the path in the config.php to=20
>>point to the snortrules-current file. It is now downloading to the=20
>>SnortCenter, but I find the following errors:
>>
>>=20
>>
>>Database ERROR:Database ERROR:You have an error in your SQL syntax.=20
>>Check the manual that corresponds to your MySQL server version for the

>=20
>=20
>>right syntax to use near 'yes' )' at line 1
>>
>>=20
>>
>>Also, each rule it errors out on is preceded by "Unknown Rule option:

>=20
> ..."
>=20
>>=20
>>
>>Has anyone seen this?
>>
>>tks,
>>
>>=20
>>
>>Jeff
>>
>>=20
>>
>>Jeff Evenson CISSP, MCSE, GSEC
>>

>=20
>=20
>=20
>=20
>=20






-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:09 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0