Snort mailing list archives
RE: unknown preprocessor "asn1_decode"
From: SRH-Lists <giermo () 333tech com>
Date: Thu, 17 Apr 2003 16:08:23 -0500
ERROR: unknown preprocessor "asn1_decode" Fatal Error, Quitting.. [FAILED] If I disable that preprocessor, I then get the same prob.
The asn1_decode preproc has been removed from 2.0, it was, according to Andrew Baker, horribly broken. Look for a replacement in the form of an SNMP preprocessor coming to a cvs server near you.
with the "Swedish Chef" preproc. "fnord" -
This was also removed in 2.0. I think that there is a patch available somewhere to add it back in. Dragos?
If I disable fnord, prob. with xml.
Also removed. Don't look for it to come back either. All exotic output functions will be handled by barnyard, if at all.
What do I need to do (be nice, now)?
My suggestion is to look at the snort.conf that came with 2.0 and either use it, or look at it to see what is supported. I am also gonna go out on a limb and make an assumption that after you fix all of the snort.conf problems, you will find that your rules are throwing errors. Use the 2.0 rules files. -steve ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- unknown preprocessor "asn1_decode" Kit Massengill (Apr 17)
- Re: unknown preprocessor "asn1_decode" Matt Kettler (Apr 17)
- <Possible follow-ups>
- RE: unknown preprocessor "asn1_decode" SRH-Lists (Apr 17)