Snort mailing list archives
Re: Another early morning fatal warning
From: Matt Olney <molney () sourcefire com>
Date: Mon, 4 May 2009 09:08:27 -0400
Damn Mondays: "Yes, the published rules are >>NOW<< 2.8.4. specific." Matt On Mon, May 4, 2009 at 9:07 AM, Matt Olney <molney () sourcefire com> wrote:
Yes, the published rules are not 2.8.4 specific. Somewhere in the archives for this list would be about 50 emails about it, but the short short is that in order to use the latest detection set, you need to be at 2.8.4. Matt On Mon, May 4, 2009 at 8:36 AM, James Lay <jlay () slave-tothe-box net> wrote:And another one ;) May 4 06:12:29 bpagateway snort[32645]: FATAL ERROR: Warning: /chroot/snort/etc/snort/rules/web-misc.rules(534) => Unknown keyword Are rules now 2.8.4 specific? Still on 2.8.3. J~ ------------------------------------------------------------------------------ Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Another early morning fatal warning James Lay (May 04)
- Re: Another early morning fatal warning Matt Olney (May 04)
- Re: Another early morning fatal warning Matt Olney (May 04)
- Re: Another early morning fatal warning Richard Bejtlich (May 04)
- Re: Another early morning fatal warning Matt Olney (May 04)
- Re: Another early morning fatal warning Joel Esler (May 04)
- Re: Another early morning fatal warning Matt Olney (May 04)