Snort mailing list archives
RE: ' asn1' in rule!..HELP
From: "Eric Hines" <eric.hines () appliedwatch com>
Date: Thu, 18 Nov 2004 16:33:15 -0600
This error message is indicative of you using Snort 2.2 rulesets on a pre Snort 2.2 binary. The ASN.1 rule option was implemented in version 2.2 of Snort. Do a $ snort -V to check your Snort version. Regards, Eric Hines, GCIA, CISSP CEO, President Applied Watch Technologies, Inc. http://www.appliedwatch.com -----Original Message----- From: James Riden [mailto:j.riden () massey ac nz] Sent: Thursday, November 18, 2004 1:12 PM To: Harris, Sam Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] ' asn1' in rule!..HELP "Harris, Sam" <Sam.Harris () fns usda gov> writes:
Anybody can think of why or how to solve this : ERROR: Warning: /etc/snort/rules/exploit.rules(79) => Unknown keyword ' asn1' in rule!
I'm guessing you've got a version of the rules which is too new for your snort version. cheers, Jamie -- James Riden / j.riden () massey ac nz / Systems Security Engineer Information Technology Services, Massey University, NZ. GPG public key available at: http://www.massey.ac.nz/~jriden/ ------------------------------------------------------- This SF.Net email is sponsored by: InterSystems CACHE FREE OODBMS DOWNLOAD - A multidimensional database that combines robust object and relational technologies, making it a perfect match for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.Net email is sponsored by: InterSystems CACHE FREE OODBMS DOWNLOAD - A multidimensional database that combines robust object and relational technologies, making it a perfect match for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ' asn1' in rule!..HELP Harris, Sam (Nov 18)
- Re: ' asn1' in rule!..HELP James Riden (Nov 18)
- RE: ' asn1' in rule!..HELP Eric Hines (Nov 18)
- Re: ' asn1' in rule!..HELP James Riden (Nov 18)