[Snort-users] newbie rules Q
dluff at ...9557...
Wed Jun 25 07:15:35 EDT 2003
The comment on the 'snortrules-stable' download page says that these
rules work with snort 1.9.x, but this is not true. The snortrules-stable
package has already been updated for version 2. So you need to download
> when applying new rules i get some strange results....
> I copy the new rule dir into the snort dir. Restart snort and then it
> i get a lot of:
> snort:warning: ../rules/rpc.rules(141) => unknown keyword 'byte_jump'
> in rule!
> over 50 of them.
> What am i doing wrong!?
> Do i need to edit the snort.conf file....or
> Please help out a newbie. ;)
More information about the Snort-users