[Snort-sigs] Warning: /etc/snort/local.rules(110) => Unknown keyword 'established' in rule!

Chris Green cmg at ...435...
Tue Aug 19 05:57:06 EDT 2003

Jukka Juslin <jtjuslin at ...1151...> writes:

> Hi,
> I took into use from Snort home page SID 2192. It has keyword established,
> and Snort doesn't like that:
> Warning: /etc/snort/local.rules(110) => Unknown keyword

Sure would help to see the lines around 110 in your config file.
Chris Green <cmg at ...435...>
Let not the sands of time get in your lunch.

More information about the Snort-sigs mailing list