[Snort-devel] problem with snort.conf

Jeff Dell jdell at ...2429...
Mon Nov 17 16:24:27 EST 2008


When downloading the rule set from here:

http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode
here>/snortrules-snapshot-CURRENT.tar.gz

The preprocessor frag3_global line is not comma separated.

It has:
#preprocessor frag3_global: max_frags 65536 prealloc_frags 262144

When it should have:
#preprocessor frag3_global: max_frags 65536, prealloc_frags 262144

As you can imagine it will throw an error because of this missing value. 

The snort.conf in the latest snort tarball is correct.


Cheers,
Jeff





More information about the Snort-devel mailing list