FW: unknown alert format
"Bill Young" <[email protected]> Tue, 3 Jun 2003 11:10:09 -0700
| Newsgroups | gmane.comp.security.ids.snort.snarf |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. ------=_NextPart_000_001C_01C329C0.B2CF3710 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Howdy, I am having a issue installing/running SnortSnarf-021111.1 on Windows = and parsing Snort 2.0 log files. When I run SnortSnarf I get the following error as it looks through the log. =20 ------------------------------------------------------ unknown alert format for line: :56464 ; skipping unknown alert format for line: :56464 ; skipping ------------------------------------------- I am also getting the following error when starting SnortSnarf but it appears not to interfere with the actual parsing of the files. ----------------------------------------------------- Using an array as a reference is deprecated at include/SnortSnarf/HTMLMemStorage.pm line 290. Using an array as a reference is deprecated at include/SnortSnarf/HTMLAnomMemStorage.pm line 266. -------------------------------------------------------- Looking back through the archives I noticed that there was an issue with = the previous version of SnortSnarf and Snort 1.9 last October. Just = wondering if anyone has seen this on Snort 2.0 and if there is a possible work = around. Thanks and appreciate any help, Bill ------=_NextPart_000_001C_01C329C0.B2CF3710 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"> <TITLE>Message</TITLE> <META content=3D"MSHTML 6.00.2726.2500" name=3DGENERATOR></HEAD> <BODY> <DIV> <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr = align=3Dleft><FONT face=3DTahoma=20 size=3D2></FONT></DIV><FONT face=3DArial size=3D2><SPAN=20 class=3D804490017-03062003>Howdy,</SPAN></FONT></DIV> <DIV><FONT face=3DArial size=3D2><SPAN class=3D804490017-03062003>I am = having a issue=20 installing/running SnortSnarf-021111.1 on Windows and parsing Snort 2.0 = log=20 files. When I run SnortSnarf I get the following error as it looks = through=20 the log.</SPAN></FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2><SPAN=20 class=3D804490017-03062003>----------------------------------------------= --------</SPAN></FONT></DIV><!-- Converted from text/rtf format --> <P><SPAN lang=3Den-us><FONT face=3D"Palatino Linotype" size=3D2>unknown = alert format=20 for line: :56464<BR>; skipping<BR>unknown alert format for line: = :56464<BR>;=20 skipping</FONT></SPAN></P> <P><SPAN lang=3Den-us><SPAN class=3D804490017-03062003><FONT=20 face=3D"Palatino Linotype"=20 size=3D2>-------------------------------------------</FONT></SPAN></SPAN>= </P> <P><SPAN lang=3Den-us><SPAN class=3D804490017-03062003><FONT = face=3DArial size=3D2>I am=20 also getting the following error when starting SnortSnarf but it appears = not to=20 interfere with the actual parsing of the files.</FONT></SPAN></SPAN></P> <P><SPAN lang=3Den-us><SPAN class=3D804490017-03062003><FONT = face=3DArial=20 size=3D2>-----------------------------------------------------</FONT></SP= AN></SPAN></P> <P><SPAN lang=3Den-us><SPAN class=3D804490017-03062003><FONT = face=3DArial size=3D2>Using=20 an array as a reference is deprecated at = include/SnortSnarf/HTMLMemStorage.pm=20 line 290.<BR>Using an array as a reference is deprecated at=20 include/SnortSnarf/HTMLAnomMemStorage.pm line = 266.</FONT></SPAN></SPAN></P> <P><SPAN lang=3Den-us><SPAN class=3D804490017-03062003><FONT = face=3DArial=20 size=3D2>--------------------------------------------------------</FONT><= /SPAN></SPAN></P> <P><SPAN lang=3Den-us><SPAN class=3D804490017-03062003><FONT = face=3DArial=20 size=3D2>Looking back through the archives I noticed that there was = an issue=20 with the previous version of SnortSnarf and Snort 1.9 last = October. =20 Just wondering if anyone has seen this on Snort 2.0 and if there is a = possible=20 work around. </FONT></SPAN></SPAN></P> <P><SPAN lang=3Den-us><SPAN class=3D804490017-03062003><FONT = face=3DArial=20 size=3D2>Thanks and appreciate any help,</FONT></SPAN></SPAN></P> <P><SPAN lang=3Den-us><SPAN class=3D804490017-03062003><FONT = face=3DArial=20 size=3D2>Bill</FONT></SPAN></SPAN></P></BODY></HTML> ------=_NextPart_000_001C_01C329C0.B2CF3710--