Snort mailing list archives

so_rules


From: <fidel69 () centrum sk>
Date: Tue, 12 Nov 2013 20:12:21 +0100

 
Hi all,
 
I have problem with snort. When i run it it says (among other things):
 
Encoded Rule Plugin SID: 23053, GID: 3 not registered properly.  Disabling this rule.
 
and that is over 300 lines, I googled it obviously, i found this: 
http://vrt-blog.snort.org/2009/01/using-vrt-certified-shared-object-rules.html 
<http://redir.netcentrum.cz/?noaudit&url=http%3A%2F%2Fvrt%2Dblog%2Esnort%2Eorg%2F2009%2F01%2Fusing%2Dvrt%2Dcertified%2Dshared%2Dobject%2Drules%2Ehtml>
 
I did everything like it says, but it didn't help and I don't understand that either, because there are only a couple of 
so_rules, definitely not over 300, so I don't know what i have wrong there.
Does this disable rules that are in rules directory?
I ran snort -c /usr/local/etc/snort/snort.conf -T like it is in the README file, output is in the attachment.
 
Thank you for help.
Sorry for my english
 
Regards,
Martin

------------------------------------------------------------------------------
DreamFactory - Open Source REST & JSON Services for HTML5 & Native Apps
OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and External API Access
Free app hosting. Or install the open source package on any LAMP server.
Sign up and see examples for AngularJS, jQuery, Sencha Touch and Native!
http://pubads.g.doubleclick.net/gampad/clk?id=63469471&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: