Snort mailing list archives

newbie rules Q


From: "SNORT" <snort () cracker dk>
Date: Wed, 25 Jun 2003 14:43:11 +0200

hello,

when applying new rules i get some strange results....

I copy the new rule dir into the snort dir. Restart snort and then it happens..

i get a lot of:

snort:warning: ../rules/rpc.rules(141) => unknown keyword 'byte_jump' in rule!

over 50 of them.

What am i doing wrong!?

Do i need to edit the snort.conf file....or

Please help out a newbie. ;)

P

Current thread: