Re: problem with classification.config

[Peter Bates <peter.bates () ucl ac uk>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello all

On 07/10/2012 17:36, Patrik Polakovic wrote:
> Hi, i have a problem with rules ClassTypes. I always get this while running
> snort:
>
> *+++++++++++++++++++++++++++++++++++++++++++++++++++
> Initializing rule chains...
> ERROR: C:\Snort\rules/bad-traffic.rules(31) Unknown ClassType:
> attempted-admin
> Fatal Error, Quitting..*
>
> Snort.config:
> # metadata reference data.  do not modify these lines
> include classification.config

I've never run Snort on Windows, but you may have to specify
the full path to classification.config, i.e.

include C:\Snort\classification.config (or wherever it is)

- -- 
Peter Bates
Senior Information Security Officer   Phone: +44(0)2076792049
Information Services Division         Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iQEcBAEBAgAGBQJQc9yWAAoJELhVoVpEMS6R05UH/3VvRuuiX0jFvXfethqG+d9F
UyPY1nAOQgFkgnJ88UX7RiI/SFKPyhB7tkMKB2ix4CL5Lew8X53YxpPbFfXw0wvH
ZJbZYuYp1xu2cXb1S24yQqRwYUfvRvQSHE8B/oXm3Xve9eDr4RdFRbB0nYgpW3TS
/jD3Wlm2B06/xQQJoJauVw4BBg6BgnB4+3EX7X/8fHoemPuNITBcd64c6jDdgUJg
kiQDrI9QcERBOA+ckUPI3+jKbF+95SkB6k6HuB10kl8E1B/9ZrXCl+FM7ZZ7z0rw
PwqQS3Dr1Un4xjUQAdI3HLDOf7mOa2tfJamgZnS2aEcMqO0pxT+y9UYeO+qlugc=
=TtFd
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!