Unknown keyword "flow" in rule!

[Steve Ochani <jpegny () optonline net>]

Hello all,

I'm running snort 1.8.3 (prebuilt package) on SunOS 5.8 on a ultra 10.

I wanted to start to use 1.8.4 and snortrules-current.tar.gz.

I removed 1.8.3 via pkgrm, wiped out the old rules and installed 

snort-1.8.4-solaris8.pkg.gz and put snortrules-current.tar.gz, configured snort.conf etc and tried 
to start snort by using this command line

/opt/snort/bin/snort -o -d -D -A fast -c /opt/snort/etc/snort.conf

but I received the following error (in the /var/adm/messages) 

ERROR: ./exploit.rules(7) => Unknown keyword "flow" in rule!

I have also tried

snort-current-sol8.pkg.gz

(which is 1.8.3) and no go


What am I doing wrong? Whould I build 1.8.4 from source (why would that be diff then the 
prebuilt package?)


Also is there a searchable archive of this mailing list?

Thanks for any help





_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users