[Snort-users] does not work local.rules

This is a discussion on [Snort-users] does not work local.rules within the Snort forums, part of the System Security and Security Related category; Ez egy sok r‚szb‹l *ll¢, MIME form*tum£ zenet. --===============0693247201== Content-Type: multipart/alternative; boundary="=_alternative 004A89C1C12571C4_=&...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 08-08-2006
repniksz@aviva.co.hu
 
Posts: n/a
Default [Snort-users] does not work local.rules

Ez egy sok r‚szb‹l *ll¢, MIME form*tum£ zenet.
--===============0693247201==
Content-Type: multipart/alternative;
boundary="=_alternative 004A89C1C12571C4_="

Ez egy sok r‚szb‹l *ll¢, MIME form*tum£ zenet.
--=_alternative 004A89C1C12571C4_=
Content-Type: text/plain; charset="US-ASCII"

Hi,
I've made a very simple rule in my local.rules:
alert tcp any any -> any 8080 ( msg: "Own"; content: "Hello!!!!"; )
and after that i've watched a file in my browser on 8080 port, and i did
not get any alert.
The local.rules is in my snort.conf .
What is wrong?
--=_alternative 004A89C1C12571C4_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=3 face="Times New Roman CE">Hi, </font>
<br><font size=3 face="Times New Roman CE">I've made a very simple rule
in my local.rules: </font>
<br><font size=3 face="Times New Roman CE">alert tcp any any -&gt; any
8080 ( msg: &quot;Own&quot;; content: &quot;Hello!!!!&quot;; ) </font>
<br><font size=3 face="Times New Roman CE">and after that i've watched
a file in my browser on 8080 port, and i did not get any alert. </font>
<br><font size=3 face="Times New Roman CE">The local.rules is in my snort.conf
.. </font>
<br><font size=3 face="Times New Roman CE">What is wrong? </font>
--=_alternative 004A89C1C12571C4_=--


--===============0693247201==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=...057&dat=121642
--===============0693247201==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============0693247201==--

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 10:56 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0