Re: Problem: Unknown ClassType

[Jeffrey Pricher <jeffpricher () yahoo com>]

Russ,
Sounds like you are using the wrong rule set. This is from http://www.snort.org/dl/rules/
 
If you are using a version before 1.9.x, please upgrade. 

If you are using 2.0.X, please use STABLE rules. 

If you are using 2.1.X, please use CURRENT rules. 

"Cluett, Russell" <russell.cluett () eds com> wrote:
I'm having a problem when starting Snort on a Linux box, it bonks on loading
rules, i.e.

ERROR: /snort/rules/exploit.rules(8) => UnknownClassType: shellcode-detect
Fatal Error, Quitting..

I've checked everything I can think of, can't see anything wrong with
snort.conf (but maybe I'm not seeing something)
if I # out the exploit.rules the same thing will happen on other rules.

There is a post at
http://www.mcabee.org/lists/snort-users/Oct-02/msg00577.html
but I
haven't seen any solutions.

Thanks,
Russ Cluett CISSP GCIH
Senior Information Security Analyst
Electronic Data Systems - EDS
AVIEN Founding Member
* phone: 613-726-4539
< >> 





-------------------------------------------------------
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product knowledge
We want to know what you know. Tell us and you have a chance to win $100
http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

---------------------------------
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search