This is a discussion on RE: [Snort-users] Snort 2.1.0 rules won't update in SnortCenter within the Snort forums, part of the System Security and Security Related category; Jason, Have you thought of downgrading to Snort 2.0 until you get time? Didn't know if you lived ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Jason,
Have you thought of downgrading to Snort 2.0 until you get time? Didn't know if you lived the pain of doing that or if it's no big deal. jeff -----Original Message----- From: Jason Alexander [mailto:lists@itsecurity3.its.uiowa.edu]=20 Sent: Monday, January 26, 2004 4:37 PM To: Jeff Evenson Subject: Re: [Snort-users] Snort 2.1.0 rules won't update in SnortCenter I'm not the best programer in the world either. I'm just trying to make=20 it work for myself in my free time. If I get it working I'll set it free but I don't have a time line for a fix as I'm doing this in my limited free time. Jason Jeff Evenson wrote: > Great, > I'd love to assist, but I'm not a programmer by trade. Thanks for the > info. > jeff >=20 > -----Original Message----- > From: Jason Alexander [mailto:lists@itsecurity3.its.uiowa.edu]=20 > Sent: Friday, January 23, 2004 9:25 AM > To: Jeff Evenson > Cc: snort-users@lists.sourceforge.net > Subject: Re: [Snort-users] Snort 2.1.0 rules won't update in SnortCenter >=20 > Jeff, >=20 > That's becasue SnortCenter doesn't know about all the rules changes in > Snort 2.1. When you try to import some of the rules thare aren't fields > in the database that are needed and you get the SQL Error. It also=20 > doesn't know anything about some of the preprocessors. >=20 > I'm currently working on trying to addapt Snort Center to work with > 2.1 but my schedule has kept me away for the last couple of days=20 > (Beagle). If I get it working I'll post my revised code here >=20 > Jason Alexander > IT Security > University of Iowa >=20 > Jeff Evenson wrote: >=20 >>I have been attempting to use SnortCenter to update rules via the=20 >>internet or file upload. I've changed the path in the config.php to=20 >>point to the snortrules-current file. It is now downloading to the=20 >>SnortCenter, but I find the following errors: >> >>=20 >> >>Database ERROR:Database ERROR:You have an error in your SQL syntax.=20 >>Check the manual that corresponds to your MySQL server version for the >=20 >=20 >>right syntax to use near 'yes' )' at line 1 >> >>=20 >> >>Also, each rule it errors out on is preceded by "Unknown Rule option: >=20 > ..." >=20 >>=20 >> >>Has anyone seen this? >> >>tks, >> >>=20 >> >>Jeff >> >>=20 >> >>Jeff Evenson CISSP, MCSE, GSEC >> >=20 >=20 >=20 >=20 >=20 ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |
![]() |
| Thread Tools | |
| Display Modes | |
|
|