[Snort-users] ' asn1' in rule!..HELP

Eric Hines eric.hines at ...8860...
Thu Nov 18 14:34:01 EST 2004

This error message is indicative of you using Snort 2.2 rulesets on a pre
Snort 2.2 binary. The ASN.1 rule option was implemented in version 2.2 of
Snort. Do a $ snort -V to check your Snort version.


Eric Hines, GCIA, CISSP
CEO, President
Applied Watch Technologies, Inc.

-----Original Message-----
From: James Riden [mailto:j.riden at ...11179...] 
Sent: Thursday, November 18, 2004 1:12 PM
To: Harris, Sam
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] ' asn1' in rule!..HELP

"Harris, Sam" <Sam.Harris at ...12674...> writes:

>    Anybody can think of why or how to solve this :
>    ERROR: Warning: /etc/snort/rules/exploit.rules(79) => Unknown keyword
>    ' asn1' in rule!

I'm guessing you've got a version of the rules which is too new for your
snort version.

James Riden / j.riden at ...11179... / Systems Security Engineer Information
Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/

This SF.Net email is sponsored by: InterSystems CACHE
FREE OODBMS DOWNLOAD - A multidimensional database that combines
robust object and relational technologies, making it a perfect match
for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list