LOL...no sweat Frank. Tried that and still get the naughty message of:
FATAL ERROR: Rule-Threshold-Parse: could not create a threshold object --
only one per sid, sid = 2001578
As this is my home machine I'm not to terribly worried about not have
bleeding-virus.rules loading up, but when I upgrade at work it will be an
issue. I'm thinking maybe I hosed something when I copied the rules over
maybe...not sure. I'll keep digging on my end. Thanks again.
James
-----Original Message-----
From: Frank Knobbe [mailto:frank@knobbe.us]
Sent: Monday, February 21, 2005 5:26 PM
To: James Lay
Cc: 'Snort-Sigs (E-mail)
Subject: RE: [Snort-sigs] Bleeding rules virus and threshold issue
On Mon, 2005-02-21 at 18:21 -0600, Frank Knobbe wrote:
-rw-r--r-- 1 jlay users 2117 Feb 21 14:07 bleeding.rules
Yeah, there it is. It's names "bleeding.rules" (my bad, I thought it was
bleeding-all.rules).
Just don't include bleeding.rules and you should be in good shape.
Yeah, right... ignore the email.... "Frank would like to recall this
message". 99 lashes for me emailing nonsense like that...
bleeding.rules is not bleeding-all.rules :)
I'm gonna go stand in the corner for a while...
Regards,
Frank
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
