I just looked in the IPS-log and I see the following:
2007:02:01-18:42:51 (none) snort[5001]: Finished Loading all dynamic detection libs from /usr/lib/snort/
2007:02:01-18:42:51 (none) snort[5001]: Unloading dynamic detection library Snort_Dynamic_Rule_Example version 1.0.1
2007:02:01-18:42:51 (none) snort[5001]: Unloading dynamic detection library Snort_Dynamic_Rule_Example version 1.0.1
2007:02:01-18:42:51 (none) snort[5001]: Unloading dynamic detection library Snort_Dynamic_Rule_Example version 1.0.1
2007:02:01-18:42:51 (none) snort[5001]: DynamicPlugin: Rule [3:8351] not enabled in configuration, rule will not be used.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'flux10.2' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'tlsv1.server_hello.request' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'tlsv1.client_hello.request' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'nightcreature.conn.step1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'CoolCat.1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'hanky_conn1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'GWBoy_InitConnection1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'sslv3.client_hello.request' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'BuschTrommel_SpyFunction1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'theef20.1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'backdoor.cybernetic.1.62.rev.conn.1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'back.optix.1.32.conn.1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'backdoor.joker.ddos.1.0.conn.1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'charon_download_1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'backdoor.NetDevil.conn.step1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'Forced_Control_Uploader_Dir3' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'dce.bind.netware_cs' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'remote.control.2' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'BuschTrommel_InitConnection1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'Omerta_1_3_conn_1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'skyrat.3' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'fear_0_2.conn.1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'backdoor.y3krat_15.connect' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'Fear15_conn.1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'up_run_2' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'dce.isystemactivator.bind.attempt' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'Mantis_Notify1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'smb.tree.create.nddeapi' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'neurotickat.1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'RemoteHAVOC_conn.1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'NetDemon_Init1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: Warning: flowbits key 'bifrose.rev_conn.1' is checked but not ever set.
2007:02:01-18:42:51 (none) snort[5001]: 226 out of 512 flowbits in use.
Why are these "flowbits" not loaded??? Is there a special reason for it? Or must I enable these flowbits manually? In V6.x you could enable/disable rules but they seem to be disapeared [:(] Can anyone explain what his above is and the ID-snort rules page of Astaro isn't (still) online yet....
This thread was automatically locked due to age.