[Snort-users] Snort.config isue

Carter Waxman (cwaxman) cwaxman at cisco.com
Thu Aug 16 11:05:36 EDT 2018

Check the line before it for a ‘\’ at the end which means continue this directive on the next line. It thinks you are trying to use ‘preprocessor’ as a configuration option for http.

- Carter

From: Snort-users <snort-users-bounces at lists.snort.org> on behalf of Alec Mason AFS via Snort-users <snort-users at lists.snort.org>
Reply-To: Alec Mason AFS <Alec.Mason at activefleetsolutions.com>
Date: Thursday, August 16, 2018 at 10:59 AM
To: "snort-users at lists.snort.org" <snort-users at lists.snort.org>
Subject: [Snort-users] Snort.config isue


I am new to Snort and trying to follow instructions to install and configure Snort on Windows.

I am getting the following error message when I am checking the install

ERROR: C:\Snort\etc\snort.config(330) =>invalid keyword 'preprocessor' for server configuration

On line 330 of snort.config there is the following

preprocessor rpc_decode: 111 32770 32771 32772 32773 32774 32775 32776 32777 32778 32779 no_alert_multiple_requests no_alert_large_fragments no_alert_incomplete

Any suggestions


Alec Mason

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20180816/a5a64fe9/attachment.html>

More information about the Snort-users mailing list