[Snort-users] Another early morning fatal warning

Matt Olney molney at ...1935...
Mon May 4 09:07:51 EDT 2009


Yes, the published rules are not 2.8.4 specific.

Somewhere in the archives for this list would be about 50 emails about
it, but the short short is that in order to use the latest detection
set, you need to be at 2.8.4.

Matt

On Mon, May 4, 2009 at 8:36 AM, James Lay <jlay at ...13475...> wrote:
> And another one ;)
>
> May  4 06:12:29 bpagateway snort[32645]: FATAL ERROR: Warning:
> /chroot/snort/etc/snort/rules/web-misc.rules(534) => Unknown keyword
>
> Are rules now 2.8.4 specific?  Still on 2.8.3.
>
> J~
>
>
>
> ------------------------------------------------------------------------------
> Register Now & Save for Velocity, the Web Performance & Operations
> Conference from O'Reilly Media. Velocity features a full day of
> expert-led, hands-on workshops and two days of sessions from industry
> leaders in dedicated Performance & Operations tracks. Use code vel09scf
> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>




More information about the Snort-users mailing list