Re: Classtype Map Error

[wkitty42 () windstream net]

On 05/17/2018 03:18 AM, Sujit Ghosal via Snort-users wrote:
> Hi Albert,
>        The file is in /etc/snort/classification.config
>
> I've explicitly set the permission of the file to be 777. Still no luck. :(


you don't want luck... remember, computers are literal... they do exactly what 
they are told to do... you've shown us an example of the errors and you've shown 
us how the file is included in your snort.conf... but you've not shown us what 
your classification.config file contains...

i can tell you that not-suspicious has been a classification for a long time... 
protocol-command-decode is a newer classification...

you might also try setting the path to classification.config explicitly... we do 
in your setup but that's because we store some files in different directories 
than default...


--
 NOTE: No off-list assistance is given without prior approval.
       *Please keep mailing list traffic on the list unless*
       *a signed and pre-paid contract is in effect with us.*
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette