[Snort-sigs] Warning: /etc/snort/local.rules(110) => Unknownkeyword 'established' in rule!

Wes Young wyoung at ...1639...
Fri Aug 22 14:25:12 EDT 2003

its probably a blank space, I have that problem all the time when I am editing rules..... make sure there are no blank/empty lines.....

>>> Chris Green <cmg at ...435...> 08/19 8:56 AM >>>
Jukka Juslin <jtjuslin at ...1151...> writes:

> Hi,
> I took into use from Snort home page SID 2192. It has keyword established,
> and Snort doesn't like that:
> Warning: /etc/snort/local.rules(110) => Unknown keyword

Sure would help to see the lines around 110 in your config file.
Chris Green <cmg at ...435...>
Let not the sands of time get in your lunch.

This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
Snort-sigs mailing list
Snort-sigs at lists.sourceforge.net 

More information about the Snort-sigs mailing list