[Snort-users] No more -z all?

Rob Hughes rob at ...1932...
Sat May 11 10:16:02 EDT 2002

Just built Version 1.8.7beta2 (Build 114) on a FreeBSD box from CVS this
morning. Now, when I run 

/usr/local/bin/snort -c /usr/local/etc/snort/snort.conf -dDeX -L
snort.log -i dc0 -z all

I get

May 11 11:58:44 ns2 snort: ERROR: OpenPcap() FSM compilation failed:   
syntax error
May 11 11:58:44 ns2 snort: FATAL ERROR: PCAP command: all

Suggestions? This was working just before I rebuilt, and nothing else
was changed.

These are my stream4 options from the conf file

preprocessor stream4: detect_scans
preprocessor stream4_reassemble:both,ports 21 22 23 25 53 80 143 110 111
513 8080 8880


More information about the Snort-users mailing list