[Snort-users] Unknown rule option: 'sd_pattern'

Alex Kirk akirk at ...1935...
Thu Jul 15 09:54:38 EDT 2010


What's the SID in question here? I don't see that pattern anywhere in the SF
rule base, and if it's not ours, we can't fix it.

On Thu, Jul 15, 2010 at 9:31 AM, Jens Link <jenslink at ...348...> wrote:

> Hi,
>
> when will this problem be fixes?
>
> ERROR: /etc/snort//rules/snort.rules(8746) Unknown rule option:
> 'sd_pattern'.
>
> Snort version is 2.8.6.
>
> Yes it easy to fix this by deleting or disabling the rules in question
> but it's a little bit annoying.
>
> I'm just asking my self it I should wait for an update or write some
> shell script to disable this automatically.
>
> cheers
>
> Jens
> --
> -------------------------------------------------------------------------
> | Foelderichstr. 40   | 13595 Berlin, Germany    | +49-151-18721264     |
> | http://blog.quux.de | jabber: jenslink at ...14770... | -------------------  |
> -------------------------------------------------------------------------
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Sprint
> What will you do first with EVO, the first 4G phone?
> Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>



-- 
Alex Kirk
AEGIS Program Lead
Sourcefire Vulnerability Research Team
+1-410-423-1937
alex.kirk at ...1935...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100715/dc6c875b/attachment.html>


More information about the Snort-users mailing list