Snort Forums Archive

Archive Home » Linux » Unknown ClassType Error... Fedora Core 5

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Unknown ClassType Error... Fedora Core 5

Posted by brandbrand on May 12, 2006 05:53:09

I don't know if I am posting this in the correct area but for some reason when I issue the following command

>> snort -c /etc/snort/snort.conf

When it gets to the rules section I recieve :

>>ERROR: /etc/snort/rules/exploit.rules(23) => Unknown ClassType: shellcode-detect

Now if I edit this line out for testing purposes it will just continue and say the same thing about the next line and so on and so on. It's not only a problem with exploit.rules either it will say the same thing about all the rules? Any ideas? I have tried two different rules downloads from www.snort.org. and I still get the problem so I don't believe the problem exist in the rules but more so somewhere in the configuration. I have folled the configuration guide to a "T" however I am trying to run this on Fedora Core 5, is there some type of package I am missing?

Anyone have any suggestions?

Posted by Adrenalin on August 24, 2006 04:59:15

Faced with same problem, but with help of a web mate have solved it.
And now post it here, because first I get to this page.

http://archives.neohapsis.com/archives/snort/2004-02/0223.html

The answer is:

"The classification.config is not included properly."