[Snort-sigs] Problems with rules in web-clients.rules over the last two days
r.fulton at ...575...
Mon May 14 17:40:51 EDT 2007
over the last two days I have been getting multiple errors in the above
file from CURRENT. If I comment the offending rule then I get another
error where the same construct appears in another rule. It looks as if
someone has tried to update a bunch of rules to use the exetentded REs
and bungled it.
May 15 09:20:10 monitor-dmzo snort: FATAL ERROR:
/home/snort/Rules/rules/web-client.rules(711) : pcre compile of
failed at offset 15 : unrecognized character after (?
(? is the introducer for a extension and should be followed by one of
I updated snort to 220.127.116.11 just in case that was the problem.
More information about the Snort-sigs