Snort mailing list archives
Re: Snort 2.0rc1 disable_ipopt_alerts doesn't work?
From: Erek Adams <erek () snort org>
Date: Sat, 29 Mar 2003 09:57:06 -0500 (EST)
On Fri, 28 Mar 2003, Nick Zitzmann wrote:
While evaluating Snort 2.0rc1, I tried turning on all of the "config" directives commented out in the new snort.conf file. After removing the colon from all of them, they all work, except for the "disable_ipopt_alerts" directive. When I turn it on, I get the following when trying to start Snort... ERROR: Unknown config directive: config disable_ipopt_alerts Fatal Error, Quitting.. Is this a bug, a typo, or has this feature not been implemented yet, or did I make a mistake here? Any ideas?
There's a typo in parser.c. 3386 else if(!strcasecmp(config, "disable_tcpopt_alerts")) Should be 3386 else if(!strcasecmp(config, "disable_ipopt_alerts")) Make that change in parser.c and all will be well. See, release canidates are a good thing. ;-) ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.net email is sponsored by: The Definitive IT and Networking Event. Be There! NetWorld+Interop Las Vegas 2003 -- Register today! http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort 2.0rc1 disable_ipopt_alerts doesn't work? Nick Zitzmann (Mar 28)
- Re: Snort 2.0rc1 disable_ipopt_alerts doesn't work? Erek Adams (Mar 29)