-   Linux - Security (
-   -   snort problem (

monroetech 12-04-2004 03:30 PM

snort problem
I updated my snort rules and snort.conf with the newest version...

Now my snort will not start, I checked my /var/log/messages and this is the error I see

Dec 4 15:24:07 www snort: FATAL ERROR: unknown preprocessor "^P\233 ^Hrtscan"

Problem is it's truncating so I cant do an exact search in my snort.conf

Anyone run across this error and know how I can fix it?


linux_terror 12-04-2004 05:26 PM

you might see what

snort -c /path/to/snort.conf
has to say.


monroetech 12-05-2004 06:10 AM

Ok, I fixed that problem....

Now I'm getting this error

ERROR: Warning: /etc/snort/exploit.rules(79) => Unknown keyword ' asn1' in rule!

almost all the rules reference ans1 in them..... bah

monroetech 12-05-2004 02:54 PM

See this is what I get for working on things after 36 hours of no sleep :)

The problem was fixed by installing the CORRECT rule sets for my Snort Version....

Thanks for the assistance....

All times are GMT -5. The time now is 03:50 AM.