[Snort-users] Flowbits

Joe Matusiewicz joem at ...692...
Tue Feb 24 09:51:17 EST 2004


At 10:49 AM 2/24/2004, Douglas McCrea wrote:
>I'm running Snort 2.1 on Windows 2000 and I'm getting the following
>error after changing my ruleset to snortrules-snapshot-2_1.tar.gz from
>current:
>
>ERROR: Warning: ../rules/netbios.rules(30) => Unknown keyword '
>flowbits' in rule!
>Fatal Error, Quitting..
>
>
>These rules were obtained from the snortrules-snapshot-2_1.tar.gz
>ruleset. Is anyone else having problems with this?
>
>Thanks
>
>Doug

I ran into this yesterday.  I updated all my sensors to 2.1.1-RC1 and it 
hasn't complained ever since although removing the keyword flowbits would 
probably fix it.

-- Joe





More information about the Snort-users mailing list