problem with using snort rules by bro

Zeek
1

Hi,

I am having a trace file with BID 10108. I am having converted snort rules of version 2.3.2.by s2b. My bro version is 1.2.1. When I run bro on my pcap file it is running with few error compiling patterns. It is not showing me the exact rule related to 10108 BID in alarm and signature file. I think this is due to those error compiling patterns. To solve that I tried the solution in wiki and archive. But no luck. I am sorry for reposting the same issue. I got no reply previously. But please help me with this issue.

Regards,
Uday.

2

Have you tried the most recent Bro version? Do you still see the
problem with that? If yes, please also try the current trunk
directly from the Subversion directory. I think this should be
solved there already.

Robin