LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   snort problem (https://www.linuxquestions.org/questions/linux-security-4/snort-problem-262572/)

monroetech 12-04-2004 02:30 PM

snort problem
 
I updated my snort rules and snort.conf with the newest version...

Now my snort will not start, I checked my /var/log/messages and this is the error I see

Dec 4 15:24:07 www snort: FATAL ERROR: unknown preprocessor "^P\233 ^Hrtscan"

Problem is it's truncating so I cant do an exact search in my snort.conf

Anyone run across this error and know how I can fix it?

Thanks

linux_terror 12-04-2004 04:26 PM

you might see what
Code:

snort -c /path/to/snort.conf
has to say.

linux_terror

monroetech 12-05-2004 05:10 AM

Ok, I fixed that problem....

Now I'm getting this error

ERROR: Warning: /etc/snort/exploit.rules(79) => Unknown keyword ' asn1' in rule!

almost all the rules reference ans1 in them..... bah

monroetech 12-05-2004 01:54 PM

See this is what I get for working on things after 36 hours of no sleep :)

The problem was fixed by installing the CORRECT rule sets for my Snort Version....

Thanks for the assistance....


All times are GMT -5. The time now is 01:52 PM.