Snort mailing list archives
Re: Unknown ClassType
From: waldo kitty <wkitty42 () windstream net>
Date: Thu, 21 Mar 2013 14:08:23 -0500
On 3/21/2013 00:59, 严骞 wrote:
Hi, Brian, I found this thread in the internet, then I subscribed the snort mailing list. http://seclists.org/snort/2012/q3/972
the thread above (from Sept 2012) is about using an old classifications.config file... the only fix is to disable those rules OR to provide a new classifications.config file... the last option being the more proper option to implement ;)
I met the same issue before, then I solved it by uncomment some line start with "output", in other word, there must be one line start with "output" in the config file.
actually, this is not correct... i have several dozen snort's in operation and */none/* of them have an output line enabled in them ;) ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_mar _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Re: Unknown ClassType 严骞 (Mar 20)
- Re: Unknown ClassType waldo kitty (Mar 21)