Snort mailing list archives

Re: Snort.config isue


From: "Carter Waxman \(cwaxman\) via Snort-users" <snort-users () lists snort org>
Date: Thu, 16 Aug 2018 15:05:36 +0000

Check the line before it for a ‘\’ at the end which means continue this directive on the next line. It thinks you are 
trying to use ‘preprocessor’ as a configuration option for http.

- Carter

From: Snort-users <snort-users-bounces () lists snort org> on behalf of Alec Mason AFS via Snort-users <snort-users () 
lists snort org>
Reply-To: Alec Mason AFS <Alec.Mason () activefleetsolutions com>
Date: Thursday, August 16, 2018 at 10:59 AM
To: "snort-users () lists snort org" <snort-users () lists snort org>
Subject: [Snort-users] Snort.config isue

Hi

I am new to Snort and trying to follow instructions to install and configure Snort on Windows.

I am getting the following error message when I am checking the install

ERROR: C:\Snort\etc\snort.config(330) =>invalid keyword 'preprocessor' for server configuration

On line 330 of snort.config there is the following

preprocessor rpc_decode: 111 32770 32771 32772 32773 32774 32775 32776 32777 32778 32779 no_alert_multiple_requests 
no_alert_large_fragments no_alert_incomplete

Any suggestions

Thanks

Alec Mason


_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Current thread: