Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Unconsumed token(s)....??

I get the message below when I run SigWizMenu. Is there anything serious with the two "Unconsumed token..." lines?

Thanks in advance,

Chris

-Load File: /usr/nr/etc/SigData.conf

Unconsumed token(s) [DeObfuscate True] passed to parameter "MinHits"

Unconsumed token(s) [DeObfuscate True] passed to parameter "MinHits"

-Load File: /usr/nr/etc/SigUser.conf

-Load File: /usr/nr/etc/SigSettings.conf

2 REPLIES
Cisco Employee

Re: Unconsumed token(s)....??

It looks like 2 signature definitions in the Cisco created SigData.conf file may not have been understood by SigWizMenu.

What Signature Update level are you running? If it is not the latest, then I would suggest upgrading your sensor to the next Signature Update.

If there were a problem in the Cisco created SigData.conf file, then it would have been corrected in the nect Signature Update. SigData.conf is replaced with each new Signature Update on the sensor.

Community Member

Re: Unconsumed token(s)....??

I do have the latest signature (3.1(3)S37) on the IDS.

79
Views
0
Helpful
2
Replies
CreatePlease to create content