Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Snort Newbies » error for all rulles

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

error for all rulles


Posted by Drud on March 21, 2005 09:47:20

when i start snort i see error message /etc/snort/rules/scan.rules(14) => Unterminated IP List. This is message for all rules!!!
What problem?

Posted by maverick on March 21, 2005 10:40:00

Check the variables you have defined in your snort.conf. Its most likely an improperly formatted IP list(extra spaces, wrong brackets) or something. Since all your rules use those vars (HOME_NET, EXTERNAL_NET, etc...), they will generate errors when used.