Re: Error app-detect.rules (18) Unknown ClassType:

[Jim Turner <JTurner () hilltopconsultants com>]

I have found that if I # all of the site specific rules,  that I can commence packet processing.

I can also enable rules one at a time, and as long as I don't enable the wrong rules, I am able to start as well.

Is the problem with the rules that I downloaded after installing?  I am running 2.9.4.1, but since I downloaded the 
free rules, they appear to be a month old.

Would I get past my problem if I subscribe and get the latest rule set?


________________________________
From: Jim Turner [jturner () hilltopconsultants com]
Sent: Monday, March 11, 2013 10:10 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Error app-detect.rules (18) Unknown ClassType:


Hello Everyone,



I am still having problems.  I was able to fix my path problems / vs. \.



I am now getting the following error when initializing rule chains.



Error: c:\snort\rules\app-detect.rules(18) Unknown ClassType: web-application-attack

Fatal Error, Quitting..

Could not create the registry key



Please help!  I would really like to get this box in use tomorrow morning.



________________________________

------------------------------------------------------------------------------
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester  
Wave(TM): Endpoint Security, Q1 2013 and "remains a good choice" in the  
endpoint security space. For insight on selecting the right partner to 
tackle endpoint security challenges, access the full report. 
http://p.sf.net/sfu/symantec-dev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!