[Snort-users] newbie rules Q

James Lay slave_tothe_box at ...131...
Wed Jun 25 05:49:41 EDT 2003


On Wed, 25 Jun 2003 14:43:11 +0200
"SNORT" <snort at ...8518...> wrote:

> hello,
> 
> when applying new rules i get some strange results....
> 
> I copy the new rule dir into the snort dir. Restart snort and then it happens..
> 
> i get a lot of:
> 
> snort:warning: ../rules/rpc.rules(141) => unknown keyword 'byte_jump' in rule!
> 
> over 50 of them.
> 
> What am i doing wrong!?
> 
> Do i need to edit the snort.conf file....or
> 
> Please help out a newbie. ;)
> 
> P

Check your version of snort and the rules files.  Snort current rules will give funkiness when used with Snort 1.8 or 1.9.

Digi





More information about the Snort-users mailing list