Snort mailing list archives

preprocessor http_inspect_server: - Faulting in Windows


From: "Michael Steele" <michaels () winsnort com>
Date: Fri, 21 Oct 2016 10:56:11 -0400

After doing some research it appears that the two lines below were added
more than a year ago to the snort.conf, and for whatever reason they were
not added to the snort.conf in the Windows installation file, or the
Registered Users Rules tarball, until recently. 

 

Line 325:   decompress_swf { deflate lzma } \

Line 326:   decompress_pdf { deflate }

 

The problem is below when Snort runs on Windows, or for anyone that has not
loaded the lzma-dev or lzma-devel package:

---------------------------------------------

      Gzip Compress Depth: 65535

      Gzip Decompress Depth: 65535

ERROR: d:\winids\snort\etc\snort.conf(326) => Invalid keyword '}' for server
configuration.

Fatal Error, Quitting..

---------------------------------------------

 

Is there something that can be done to fix the problem, other than hashing
those line out, maybe a dynamic linked library ?

 

Thanks.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: