snortsnarf first_last error

"Ã…kerstrom, Peter" <[email protected]> Wed, 19 Feb 2003 09:50:30 +0100
Newsgroups gmane.comp.security.ids.snort.snarf
Message-ID <[email protected]>
This is a multi-part message in MIME format.

------_=_NextPart_001_01C2D7F3.F49AF158
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Running snortsnarf with:
snortsnarf.pl -d ..\html -win ..\log\alert.ids
=20
produces:
Can't call method "first_last" on an undefined value at =
include/SnortSnarf/HTML
emStorage.pm line 220.
=20
alert.ids contains only:
[**] [1:2003:2] MS-SQL Worm propagation attempt [**]
[Classification: Misc Attack] [Priority: 2]=20
02/13-09:16:50.710470 213.228.40.15:3148 -> 195.252.15.34:1434
UDP TTL:104 TOS:0x0 ID:65141 IpLen:20 DgmLen:404
Len: 384

Any ideas?
=20
Regards
Peter Akerstrom
=20

------_=_NextPart_001_01C2D7F3.F49AF158
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1141" name=3DGENERATOR></HEAD>
<BODY>
<DIV><SPAN class=3D141594608-19022003><FONT size=3D2>Running snortsnarf=20
with:</FONT></SPAN></DIV>
<DIV><SPAN class=3D141594608-19022003><FONT size=3D2>snortsnarf.pl -d =
..\html -win=20
..\log\alert.ids</FONT></SPAN></DIV>
<DIV><SPAN class=3D141594608-19022003><FONT =
size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D141594608-19022003><FONT =
size=3D2>produces:</FONT></SPAN></DIV>
<DIV><FONT size=3D2>Can't call method "first_last" on an undefined value =
at=20
include/SnortSnarf/HTML<BR>emStorage.pm line 220.</FONT></DIV>
<DIV><FONT size=3D2></FONT>&nbsp;</DIV>
<DIV><SPAN class=3D141594608-19022003><FONT size=3D2>alert.ids contains=20
only:</FONT></SPAN></DIV>
<DIV><SPAN class=3D141594608-19022003><FONT size=3D2>[**] [1:2003:2] =
MS-SQL Worm=20
propagation attempt [**]<BR>[Classification: Misc Attack] [Priority: 2]=20
<BR>02/13-09:16:50.710470 213.228.40.15:3148 -&gt; =
195.252.15.34:1434<BR>UDP=20
TTL:104 TOS:0x0 ID:65141 IpLen:20 DgmLen:404<BR>Len: =
384<BR></FONT></SPAN></DIV>
<DIV><SPAN class=3D141594608-19022003><FONT size=3D2>Any =
ideas?</FONT></SPAN></DIV>
<DIV><SPAN class=3D141594608-19022003><FONT =
size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D141594608-19022003><FONT =
size=3D2>Regards</FONT></SPAN></DIV>
<DIV><SPAN class=3D141594608-19022003><FONT size=3D2>Peter=20
Akerstrom</FONT></SPAN></DIV>
<DIV><SPAN class=3D141594608-19022003><FONT=20
size=3D2>&nbsp;</DIV></FONT></SPAN></BODY></HTML>
=00
------_=_NextPart_001_01C2D7F3.F49AF158--