Feb 29 11:17:00 resolute snort[7973]: | gen-id=1 sig-id=2003260 type=Both tracking=src count=1 seconds=900
Feb 29 11:17:00 resolute snort[7973]: | gen-id=1 sig-id=2500110 type=Limit tracking=src count=1 seconds=60
Feb 29 11:17:00 resolute snort[7973]: | gen-id=1 sig-id=8360 type=Limit tracking=src count=1 seconds=300
Feb 29 11:17:00 resolute snort[7973]: | gen-id=1 sig-id=12485 type=Limit tracking=src count=1 seconds=300
Feb 29 11:17:00 resolute snort[7973]: | gen-id=1 sig-id=2500182 type=Limit tracking=src count=1 seconds=60
Feb 29 11:17:00 resolute snort[7973]: | gen-id=1 sig-id=2500107 type=Limit tracking=src count=1 seconds=60
Feb 29 11:17:00 resolute snort[7973]: | gen-id=1 sig-id=2003068 type=Threshold tracking=src count=5 seconds=120
Feb 29 11:17:00 resolute snort[7973]: | gen-id=1 sig-id=2500256 type=Limit tracking=src count=1 seconds=60
Feb 29 11:17:00 resolute snort[7973]: | gen-id=1 sig-id=2500093 type=Limit tracking=src count=1 seconds=60
Feb 29 11:17:00 resolute snort[7973]: +-----------------------[suppression]------------------------------------------
Feb 29 11:17:00 resolute snort[7973]: | none
Feb 29 11:17:00 resolute snort[7973]: -------------------------------------------------------------------------------
Feb 29 11:17:00 resolute snort[7973]: Rule application order: activation->dynamic->pass->drop->alert->log
Feb 29 11:17:00 resolute snort[7973]: Log directory = /var/log/snort-ciscoE1
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'dce.bind.mqqm' is checked but not ever set.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'SoberAuth' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'BS.SSL.Client.Key' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'works.download' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'AdvancedSpy_detection' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'BS.SSL.Server.Hello' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'mspub_header' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'BS.SSL.Server.Hello.Done' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'trojan' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'irc.trojan' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'ssh.brute.attempt' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'BS.SSL.Server.Cert' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: Warning: flowbits key 'BE.trojan' is set but not ever checked.
Feb 29 11:17:00 resolute snort[7973]: 167 out of 512 flowbits in use.
Feb 29 11:17:00 resolute snort[7973]: OpenPcap() device eth1 network lookup: eth1: no IPv4 address assigned
Feb 29 11:17:00 resolute snort[7973]: Initializing daemon mode
Feb 29 11:17:00 resolute snort[7974]: OpenPcap() device eth1 network lookup: eth1: no IPv4 address assigned
Feb 29 11:17:00 resolute snort[7974]: PID path stat checked out ok, PID path set to /var/run/
Feb 29 11:17:00 resolute snort[7974]: FATAL ERROR: Failed to Lock PID File "/var/run//snort_eth1.pid" for PID "7974"
Feb 29 11:17:01 resolute snort[7973]: Child exited unexpectedly
Feb 29 11:17:01 resolute snort[7973]: Daemon parent exiting