RE: ' asn1' in rule!..HELP

["Eric Hines" <eric.hines () appliedwatch com>]

This error message is indicative of you using Snort 2.2 rulesets on a pre
Snort 2.2 binary. The ASN.1 rule option was implemented in version 2.2 of
Snort. Do a $ snort -V to check your Snort version.

Regards,

Eric Hines, GCIA, CISSP
CEO, President
Applied Watch Technologies, Inc.
http://www.appliedwatch.com



-----Original Message-----
From: James Riden [mailto:j.riden () massey ac nz] 
Sent: Thursday, November 18, 2004 1:12 PM
To: Harris, Sam
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] ' asn1' in rule!..HELP

"Harris, Sam" <Sam.Harris () fns usda gov> writes:

>    Anybody can think of why or how to solve this :
>
>
>
>    ERROR: Warning: /etc/snort/rules/exploit.rules(79) => Unknown keyword
>    ' asn1' in rule!

I'm guessing you've got a version of the rules which is too new for your
snort version.

cheers,
 Jamie
--
James Riden / j.riden () massey ac nz / Systems Security Engineer Information
Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/




-------------------------------------------------------
This SF.Net email is sponsored by: InterSystems CACHE
FREE OODBMS DOWNLOAD - A multidimensional database that combines
robust object and relational technologies, making it a perfect match
for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email is sponsored by: InterSystems CACHE
FREE OODBMS DOWNLOAD - A multidimensional database that combines
robust object and relational technologies, making it a perfect match
for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users