[Snort-users] need help some idmef problem

--0-501968041-1104487986=:93937
Content-Type: text/plain; charset=big5
Content-Transfer-Encoding: 8bit

Dear all

I got some problem when I use idmef plugin could somebody help me?

after I build snort+ idmef and do some atk test and snort dead with this error

" FATAL ERROR: IDMEF: cannot output messages on a NULL facility "

I running snort 2.2.0 snort-idmef 1.2.5 and 1.2.6 ( both of them have the same problem)

could anybody help me

Kenyon



---------------------------------
Yahoo!©_¼¯¹q¤l«H½c
250MB ¶W¤j§K¶O«H½c¡A«H¥ó¦A¦h¤]¤£©È¡I°¨¤W¨Ï¥Î
--0-501968041-1104487986=:93937
Content-Type: text/html; charset=big5
Content-Transfer-Encoding: 8bit

<DIV>Dear all</DIV>
<DIV>&nbsp;</DIV>
<DIV>I got some problem when I use idmef plugin could somebody help me?</DIV>
<DIV>&nbsp;</DIV>
<DIV>after I build snort+ idmef and do some atk test and snort dead with this error</DIV>
<DIV>&nbsp;</DIV>
<DIV>" FATAL ERROR: IDMEF: cannot output messages on a NULL facility "</DIV>
<DIV>&nbsp;</DIV>
<DIV>I&nbsp;running snort 2.2.0&nbsp;&nbsp;&nbsp; snort-idmef 1.2.5 and 1.2.6 ( both of them have the same problem)</DIV>
<DIV>&nbsp;</DIV>
<DIV>could anybody help me</DIV>
<DIV>&nbsp;</DIV>
<DIV>Kenyon</DIV><p><br><hr size=1>Yahoo!©_¼¯¹q¤l«H½c<br>

250MB ¶W¤j§K¶O«H½c¡A«H¥ó¦A¦h¤]¤£©È¡I<a href="http://tw.rd.yahoo.com/referurl/mail/taglink/*http://mail.yahoo.com.tw">°¨¤W¨Ï¥Î</a>
--0-501968041-1104487986=:93937--


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users