[Snort-sigs] Warning: /etc/snort/local.rules(110) => Unknown keyword 'established' in rule!
jtjuslin at ...1151...
Mon Aug 18 06:31:11 EDT 2003
I took into use from Snort home page SID 2192. It has keyword established,
and Snort doesn't like that:
Warning: /etc/snort/local.rules(110) => Unknown keyword
I am running this version of Snort:
[ snort]# /usr/bin/snort -V
-*> Snort! <*-
Version 2.0.1 (Build 88)
By Martin Roesch (roesch at ...435..., www.snort.org)
Do you have an idea what is wrong?
More information about the Snort-sigs