snort problem

monroetech · 12-04-2004, 02:30 PM

I updated my snort rules and snort.conf with the newest version...

Now my snort will not start, I checked my /var/log/messages and this is the error I see

Dec 4 15:24:07 www snort: FATAL ERROR: unknown preprocessor "^P\233 ^Hrtscan"

Problem is it's truncating so I cant do an exact search in my snort.conf

Anyone run across this error and know how I can fix it?

Thanks

linux_terror · 12-04-2004, 04:26 PM

you might see what

Code:

snort -c /path/to/snort.conf

has to say.

linux_terror

monroetech · 12-05-2004, 05:10 AM

Ok, I fixed that problem....

Now I'm getting this error

ERROR: Warning: /etc/snort/exploit.rules(79) => Unknown keyword ' asn1' in rule!

almost all the rules reference ans1 in them..... bah

monroetech · 12-05-2004, 01:54 PM

See this is what I get for working on things after 36 hours of no sleep

The problem was fixed by installing the CORRECT rule sets for my Snort Version....

Thanks for the assistance....