Snort Cookbook
by Angela Orebaugh, Simon Biles & Jacob Babbin

This errata page lists errors outstanding in the most recent printing.

If you have technical questions or error reports, you can send them to
booktech@oreilly.com.  Please specify the printing date of your copy.

This page was updated November 10, 2006.

Here's a key to the markup:
	[page-number]: serious technical mistake
	{page-number}: minor technical mistake
	<page-number>: important language/formatting problem
	(page-number): language change or minor formatting problem
	?page-number?: reader question or request for clarification



Confirmed errors:


{19} In "DISCUSSION" first paragraph;
And solder in a 23pF capacitor...
Should read:
And solder in a 22pF capacitor... 



(23)  bottom, AirSnort entry;
This is available from , but despite...
should read:
This is available from the above link, but despite...


(91)  2nd-last code sample;
    var IRC_PORTS 6667:70001
should be:
    var IRC_PORTS 6667:7001


(109)  2nd-last paragraph;
Immediately mark out known server, and...
should read:
Immediately mark out known servers and...


(109)  2nd-last paragraph;
...you can determine with what ports and to whom your talk workstation has been communicating.
should read:
...you can determine with what ports and to whom your workstation has been communicating.


(117)  2nd paragraph;
Replace
"Then make the payload a little more accurate, ssing the keyword within"
with
"Then make the payload a little more accurate, using the keyword within"
                                               ^

(241)  6th paragraph (last);
"The unixsock alerting program from Recipe 2.n has ..."
should read
"The unixsock alerting program from Recipe 2.23 has ..."
                                             ^^


(251)  middle of page, list entry for "sdrop";
Drops the packet using Iptables but does not log itreplace
should read:
Drops the packet using Iptables but does not log it