[Snort-sigs] Problem with snort-1.8.6 and snortrules

Imran William Smith iwsmith at ...500...
Mon May 6 17:51:03 EDT 2002


Miguel, I believe you are correct, there are flow: rules in
the 1.8 ruleset, however as far as I can tell, they are all
commented out by default.  Did you uncomment some rules?

--
Imran William Smith
Security Products Development
Mimos Bhd, Malaysia


----- Original Message ----- 
From: "Miguel Armas" <kuko at ...587...>
To: <snort-sigs at lists.sourceforge.net>
Sent: Monday, May 06, 2002 8:31 PM
Subject: [Snort-sigs] Problem with snort-1.8.6 and snortrules


| 
| Hi there! I'm not sure if this is the right place to ask, sorry if it 
| isn't...
| 
| I have just upgraded my hosts to snort-1.8.6 and the snort rules found in:
| http://www.snort.org/dl/signatures/snortrules.tar.gz
| and I'm getting a lot of the following error: 
| Unknown keyword "flow" in rule!
| I guess this is a new feature added to the 1.9 development branch. 
| 
| Isn't the snortrules.tar.gz supposed to work with the latest stable snort? 
| If this isn't the correct file for the 1.8.x branch, which one should I 
| download?
| 
| Salu2!
| -- 
| -------------------------------------
| Miguel Armas del Rio <kuko at ...587...>
| Subdireccion de Comunicaciones (SC)
| Universidad de Las Palmas
| -------------------------------------
| 
| 
| 
| _______________________________________________________________
| 
| Have big pipes? SourceForge.net is looking for download mirrors. We supply
| the hardware. You get the recognition. Email Us: bandwidth at ...198...
| _______________________________________________
| Snort-sigs mailing list
| Snort-sigs at lists.sourceforge.net
| https://lists.sourceforge.net/lists/listinfo/snort-sigs
| 





More information about the Snort-sigs mailing list