Problem procesing logs
Ismael <[email protected]> Wed, 10 Dec 2003 15:01:49 +0100
| Newsgroups | gmane.comp.security.ids.snort.snarf |
|---|---|
| Message-ID | <[email protected]> |
Hello, this is my first port in the mailing list, Since I updated from versión 1.9 to 2.0.5, I get the following errors. When I run Snortsnarf.pl I get: unknown alert format for line: TCP TTL:64 TOS:0x0 ID:37163 IpLen:20 DgmLen:60 DF ; skipping unknown alert format for line: ******S* Seq: 0x58E58032 Ack: 0x0 Win: 0x16D0 TcpLen: 40 ; skipping unknown alert format for line: TCP Options (5) => MSS: 1460 SackOK TS: 34017561 0 NOP WS: 0 ; skipping unknown alert format for line: UDP TTL:64 TOS:0x0 ID:0 IpLen:20 DgmLen:67 DF ; skipping unknown alert format for line: Len: 39 ; skipping unknown alert format for line: TCP TTL:64 TOS:0x0 ID:6012 IpLen:20 DgmLen:60 DF ; skipping unknown alert format for line: ******S* Seq: 0x1896C5B1 Ack: 0x0 Win: 0x16D0 TcpLen: 40 ; skipping unknown alert format for line: TCP Options (5) => MSS: 1460 SackOK TS: 40424141 0 NOP WS: 0 ; skipping Someone knows what is happening ? What is wrong in my config file? Any clue will be apreciated. Ismael Gil.(Spain)