Re: [Q] Bleedingsnort rules

[Stef <stefmit () gmail com>]

I did - and it did not work, but even logically speaking,the error is
such that it points to the right file - again:

ERROR: <my-path-to-rules>/bleeding-sid-msg.map(1) => Unknown rule type: 2000003

which implies: no need to append the content of the file anywhere else
- it already found it - and it just did not know what to do with the
first entry, of the first line (and probably all the subsequent ones,
if even past the first ...)


On Wed, 08 Dec 2004 10:41:51 -0600, Frank Knobbe <frank () knobbe us> wrote:
> On Wed, 2004-12-08 at 10:15, Stef wrote:
> > This is not what I meant - please re-read the email. The map was "made
> > available" (which it should), and the rules also, but - no matter
> > where either of the two is (actually "are", for the rules), I get the
> > error. I do NOT include the map in snort.conf, of course.
>
> Have you appended the contents of bleeding-sid-msg.map to the existing
> sid-msg.map?
>
> -Frank


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users