[Snort-users] newbie rules Q
slave_tothe_box at ...131...
Wed Jun 25 05:49:41 EDT 2003
On Wed, 25 Jun 2003 14:43:11 +0200
"SNORT" <snort at ...8518...> wrote:
> when applying new rules i get some strange results....
> I copy the new rule dir into the snort dir. Restart snort and then it happens..
> i get a lot of:
> snort:warning: ../rules/rpc.rules(141) => unknown keyword 'byte_jump' in rule!
> over 50 of them.
> What am i doing wrong!?
> Do i need to edit the snort.conf file....or
> Please help out a newbie. ;)
Check your version of snort and the rules files. Snort current rules will give funkiness when used with Snort 1.8 or 1.9.
More information about the Snort-users