Main Archive Page > Month Archives  > snort-users archives

Re: [Snort-users] Another early morning fatal warning

From: Joel Esler <jesler_at_nospam>
Date: Mon May 04 2009 - 08:08:32 GMT
To: James Lay <jlay@slave-tothe-box.net>

James Lay said:
> And another one ;)
>
> May 4 06:12:29 bpagateway snort[32645]: FATAL ERROR: Warning:
> /chroot/snort/etc/snort/rules/web-misc.rules(534) => Unknown keyword
>
> Are rules now 2.8.4 specific? Still on 2.8.3.

The current release of 2.8.x is supported. 534 contains the http_header keyword. I suggest upgrading to current (2.8.4.1)

J

---

Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users