Snort mailing list archives
Re: RULES -> Unknown ClassType:
From: Brian <bmc () snort org>
Date: Tue, 10 Feb 2004 20:47:21 -0500
On Tue, Feb 10, 2004 at 06:49:44PM -0600, MVIBE wrote:
Please tell me that I do not have to edit every single rules file taking out all of the ClassType: ********* parts of all the rules. I was hoping it was just one or two classtypes that were unrecognized, but having edited almost 8 consecutive RULES files, I am starting to see that maybe CLASSTYPE: is no longer recognized in this version SNORT when reading the rules files?
No. you don't have classification.config included properly. see the default snort.conf for the proper include lines. Brian ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RULES -> Unknown ClassType: MVIBE (Feb 10)
- Re: RULES -> Unknown ClassType: Brian (Feb 10)
- Re: RULES -> Unknown ClassType: MVIBE (Feb 10)
- RE: RULES -> Unknown ClassType: Michael Steele (Feb 10)
- <Possible follow-ups>
- RULES -> Unknown Classtype: VIBE (Feb 11)
- Re: RULES -> Unknown ClassType: Brian (Feb 10)