[Snort-users] unknown keyword in vision.rules
vision at ...4...
Sat Apr 21 08:07:12 EDT 2001
This is supported in Snort 1.8 - which you can download (BETA 3) at
whitehats.com, or directly from the CVS server at Sourceforge:
If it is not feasible for you to upgrade, you can do this for Snort 1.7:
cat vision.conf | sed 's/uricontent/content/g' > vision.conf
On Sat, 21 Apr 2001, dotslash wrote:
> i d/l snort-1.7 today and also vision.rules. when i ran snort using
> vision.rules i get the following:
> Apr 21 15:03:36 snortle snort: ERROR: vision.rules (93) => Unknown keyword
> "uricontent" in rule!
> i was using vision.rules with snort-1.7 before and never encountered this
> before. what must be done with this?
More information about the Snort-users