[Snort-sigs] Warning: /etc/snort/local.rules(110) => Unknown keyword 'established' in rule!

Jukka Juslin jtjuslin at ...1151...
Mon Aug 18 06:31:11 EDT 2003


Hi,

I took into use from Snort home page SID 2192. It has keyword established,
and Snort doesn't like that:
Warning: /etc/snort/local.rules(110) => Unknown keyword

I am running this version of Snort:

[ snort]# /usr/bin/snort -V

-*> Snort! <*-
Version 2.0.1 (Build 88)
By Martin Roesch (roesch at ...435..., www.snort.org)
[ snort]#

Do you have an idea what is wrong?


Jukka




More information about the Snort-sigs mailing list