Snort mailing list archives

Re: newbie rules Q


From: James Lay <slave_tothe_box () yahoo com>
Date: Wed, 25 Jun 2003 06:47:37 -0600

On Wed, 25 Jun 2003 14:43:11 +0200
"SNORT" <snort () cracker dk> wrote:

hello,

when applying new rules i get some strange results....

I copy the new rule dir into the snort dir. Restart snort and then it happens..

i get a lot of:

snort:warning: ../rules/rpc.rules(141) => unknown keyword 'byte_jump' in rule!

over 50 of them.

What am i doing wrong!?

Do i need to edit the snort.conf file....or

Please help out a newbie. ;)

P

Check your version of snort and the rules files.  Snort current rules will give funkiness when used with Snort 1.8 or 
1.9.

Digi



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: