[Snort-users] rules errors

Sheahan, Paul Paul.Sheahan at ...2218...
Thu Aug 7 10:23:08 EDT 2003


Just downloaded snortrules-stable and the comment on the site says "works
for 1.9.x". I'm running Snort Version 1.9.0 (Build 209) on Linux. Yet after
installing the rules I get these errors when starting Snort:

Warning: /etc/snort/rpc.rules(210) => Unknown keyword 'byte_jump' in rule!
Warning: /etc/snort/rpc.rules(210) => Unknown keyword 'byte_jump' in rule!
Warning: /etc/snort/netbios.rules(23) => Unknown keyword 'byte_test' in
rule!
Warning: /etc/snort/netbios.rules(28) => Unknown keyword 'byte_test' in
rule!
Warning: /etc/snort/netbios.rules(29) => Unknown keyword 'byte_test' in
rule!
Warning: /etc/snort/netbios.rules(30) => Unknown keyword 'byte_test' in
rule!
Warning: /etc/snort/netbios.rules(31) => Unknown keyword 'byte_test' in
rule!
Warning: /etc/snort/misc.rules(42) => Unknown keyword 'byte_test' in rule!
Warning: /etc/snort/misc.rules(43) => Unknown keyword 'byte_test' in rule!

Any ideas?

Thanks,
Paul





More information about the Snort-users mailing list