[Snort-sigs] Problems with rules in web-clients.rules over the last two days
nigel at ...435...
Mon May 14 18:12:15 EDT 2007
On 0, Russell Fulton <r.fulton at ...575...> wrote:
> Hi folks
> over the last two days I have been getting multiple errors in the above
> file from CURRENT. If I comment the offending rule then I get another
> error where the same construct appears in another rule. It looks as if
> someone has tried to update a bunch of rules to use the exetentded REs
> and bungled it.
> May 15 09:20:10 monitor-dmzo snort: FATAL ERROR:
> /home/snort/Rules/rules/web-client.rules(711) : pcre compile of
> failed at offset 15 : unrecognized character after (?
> (? is the introducer for a extension and should be followed by one of
> I updated snort to 126.96.36.199 just in case that was the problem.
I cannot duplicate the problem you are having. Could you please check
the revision numbers for the following SIDs:
More information about the Snort-sigs