snort-users May 2009 archive
Main Archive Page > Month Archives  > snort-users archives
snort-users: Re: [Snort-users] Another early morning fatal warni

Re: [Snort-users] Another early morning fatal warning

From: Matt Olney <molney_at_nospam>
Date: Mon May 04 2009 - 13:08:27 GMT
To: James Lay <jlay@slave-tothe-box.net>


Damn Mondays:

"Yes, the published rules are >>NOW<< 2.8.4. specific."

Matt

On Mon, May 4, 2009 at 9:07 AM, Matt Olney <molney@sourcefire.com> wrote:
> Yes, the published rules are not 2.8.4 specific.
>
> Somewhere in the archives for this list would be about 50 emails about
> it, but the short short is that in order to use the latest detection
> set, you need to be at 2.8.4.
>
> Matt
>
> On Mon, May 4, 2009 at 8:36 AM, James Lay <jlay@slave-tothe-box.net> wrote:
>> And another one ;)
>>
>> May 4 06:12:29 bpagateway snort[32645]: FATAL ERROR: Warning:
>> /chroot/snort/etc/snort/rules/web-misc.rules(534) => Unknown keyword
>>
>> Are rules now 2.8.4 specific? Still on 2.8.3.
>>
>> J~
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Register Now & Save for Velocity, the Web Performance & Operations
>> Conference from O'Reilly Media. Velocity features a full day of
>> expert-led, hands-on workshops and two days of sessions from industry
>> leaders in dedicated Performance & Operations tracks. Use code vel09scf
>> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users@lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
>



Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users