[Snort-users] Unknown ClassType: sdf

Al Lewis (allewi) allewi at ...589...
Sat Apr 4 09:32:47 EDT 2015


What is the variable “$PREPROC_RULE_PATH” defined as?

Can you send us a copy of the conf file?

Albert Lewis
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi at ...589...

From: Andrew Shagayev [mailto:drewshg at ...11827...]
Sent: Saturday, April 04, 2015 1:08 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Unknown ClassType: sdf

Hi everyone!

OS X 10.10.2
Snort 2.9.7.2 GRE (Build 177)
when running snort, getting this:
…
Initializing rule chains...
ERROR: /usr/local/etc/snort/preproc_rules/preprocessor.rules(215) Unknown ClassType: sdf
Fatal Error, Quitting..

I have 'include classification.config' in my snort.conf and 'config classification: sdf,Senstive Data,2'
Snort starts if only I comment these lines in snort.conf:

include $PREPROC_RULE_PATH/preprocessor.rules
include $PREPROC_RULE_PATH/sensitive-data.rules

Any ideas? Would appreciate any help!

--
A.S.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150404/cac85a07/attachment.html>


More information about the Snort-users mailing list