[Snort-devel] Windows broken on snort.conf

Michael Steele michaels at ...2826...
Wed Oct 26 21:09:23 EDT 2016

Not real sure what changing the message will do. Snort fails (croaks) when
it hits the line.


Is there no way to get this function into a Windows install?


It would be nice to keep as much cross compatibility intact as possible.


For now I'm just having everyone hash out the line.


Kindest regards,



From: Russ [mailto:rucombs at ...3461...] 
Sent: Wednesday, October 26, 2016 9:30 AM
To: Seshaiah Erugu (serugu) <serugu at ...3461...>; Michael Steele
<michaels at ...2826...>; snort-devel at lists.sourceforge.net
Subject: Re: [Snort-devel] Windows broken on snort.conf


We at least should fix the error message.  "Invalid keyword '}' for server
configuration" should be more like "unsupported decompression: 'lzma'".

On 10/26/16 8:54 AM, Seshaiah Erugu (serugu) wrote:

Hi Michale,


Geoffrey Serrao responded to your query. Please find the attachment.



Seshaiah Erugu.


From: Michael Steele [mailto:michaels at ...2826...] 
Sent: Wednesday, October 26, 2016 6:11 PM
To: snort-devel at lists.sourceforge.net
<mailto:snort-devel at lists.sourceforge.net> 
Subject: [Snort-devel] Windows broken on snort.conf


I've asked about this before and have yet to get any response from the
Development team.


The below line in the snort.conf breaks Windows because there is a missing
library to decompress.


decompress_swf { deflate lzma } \


What do we need to do as Windows users so we don't lose this function?


Is there going to be a fix available soon, and are you looking into it?


Kindest regards,


The Command Line: Reinvented for Modern Developers
Did the resurgence of CLI tooling catch you by surprise?
Reconnect with the command line and become more productive. 
Learn the new .NET and ASP.NET CLI. Get your free copy!

Snort-devel mailing list
Snort-devel at lists.sourceforge.net <mailto:Snort-devel at lists.sourceforge.net>

Please visit http://blog.snort.org for the latest news about Snort!


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20161026/5147d8be/attachment.html>

More information about the Snort-devel mailing list