cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
266
Views
0
Helpful
2
Replies

Unconsumed token(s)....??

chrisv
Level 1
Level 1

I get the message below when I run SigWizMenu. Is there anything serious with the two "Unconsumed token..." lines?

Thanks in advance,

Chris

-Load File: /usr/nr/etc/SigData.conf

Unconsumed token(s) [DeObfuscate True] passed to parameter "MinHits"

Unconsumed token(s) [DeObfuscate True] passed to parameter "MinHits"

-Load File: /usr/nr/etc/SigUser.conf

-Load File: /usr/nr/etc/SigSettings.conf

2 Replies 2

marcabal
Cisco Employee
Cisco Employee

It looks like 2 signature definitions in the Cisco created SigData.conf file may not have been understood by SigWizMenu.

What Signature Update level are you running? If it is not the latest, then I would suggest upgrading your sensor to the next Signature Update.

If there were a problem in the Cisco created SigData.conf file, then it would have been corrected in the nect Signature Update. SigData.conf is replaced with each new Signature Update on the sensor.

I do have the latest signature (3.1(3)S37) on the IDS.