[Snort-users] Pulledpork modifyingsid error

Shirkdog shirkdog at ...11827...
Wed Jun 29 11:53:28 EDT 2016


Is your issue resolved since you closed the issue on github?

If not, get the latest code and try again and reopen as necessary.
On Jun 29, 2016 11:32 AM, "Rahul Bhonsale" <rbhonsale at ...17208...>
wrote:

> I just updated to snort 2.9.8 and was running pulledpork for the new rules
> and have come across this error...
>
> Modifying Sids....
>         Modifying GID:1,SID:2010939 from:\$EXTERNAL_NET to:!$HOME_NET
>         Modifying GID:1,SID:2016149 from:\$EXTERNAL_NET to:$AMZIGNORE
>         Modifying GID:1,SID:2016150 from:\$EXTERNAL_NET to:$AMZIGNORE
>         Modifying GID:1,SID:2000419 from:\policy-violation to:\demote-rule
> Can't find Unicode property definition "o" at /usr/local/bin/pulledpork.pl
> line 838, <FH> line 4.
>
> I'm not really sure how to go about fixing this or where the problem lies.
> Please help.
> Rahul
>
> ------------------------------------------------------------------------------
> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
> Francisco, CA to explore cutting-edge tech and listen to tech luminaries
> present their vision of the future. This family event has something for
> everyone, including kids. Get more information and register today.
> http://sdm.link/attshape
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20160629/ba01c49d/attachment.html>


More information about the Snort-users mailing list