[Snort-sigs] Warning: /etc/snort/local.rules(110) => Unknown keyword 'established' in rule!

Chris Green cmg at ...435...
Tue Aug 19 05:57:06 EDT 2003


Jukka Juslin <jtjuslin at ...1151...> writes:

> Hi,
>
> I took into use from Snort home page SID 2192. It has keyword established,
> and Snort doesn't like that:
> Warning: /etc/snort/local.rules(110) => Unknown keyword
>

Sure would help to see the lines around 110 in your config file.
-- 
Chris Green <cmg at ...435...>
Let not the sands of time get in your lunch.




More information about the Snort-sigs mailing list