snort-users May 2009 archive
Main Archive Page > Month Archives  > snort-users archives
snort-users: Re: [Snort-users] Another early morning fatal warni

Re: [Snort-users] Another early morning fatal warning

From: Matt Olney <molney_at_nospam>
Date: Mon May 04 2009 - 13:07:51 GMT
To: James Lay <jlay@slave-tothe-box.net>


Yes, the published rules are not 2.8.4 specific.

Somewhere in the archives for this list would be about 50 emails about it, but the short short is that in order to use the latest detection set, you need to be at 2.8.4.

Matt

On Mon, May 4, 2009 at 8:36 AM, James Lay <jlay@slave-tothe-box.net> wrote:
> And another one ;)
>
> May 4 06:12:29 bpagateway snort[32645]: FATAL ERROR: Warning:
> /chroot/snort/etc/snort/rules/web-misc.rules(534) => Unknown keyword
>
> Are rules now 2.8.4 specific? Still on 2.8.3.
>
> J~
>
>
>
> ------------------------------------------------------------------------------
> Register Now & Save for Velocity, the Web Performance & Operations
> Conference from O'Reilly Media. Velocity features a full day of
> expert-led, hands-on workshops and two days of sessions from industry
> leaders in dedicated Performance & Operations tracks. Use code vel09scf
> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>



Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users