Snort mailing list archives

Re: Snort 2.0rc1 disable_ipopt_alerts doesn't work?


From: Erek Adams <erek () snort org>
Date: Sat, 29 Mar 2003 09:57:06 -0500 (EST)

On Fri, 28 Mar 2003, Nick Zitzmann wrote:

While evaluating Snort 2.0rc1, I tried turning on all of the "config"
directives commented out in the new snort.conf file. After removing the
colon from all of them, they all work, except for the
"disable_ipopt_alerts" directive. When I turn it on, I get the
following when trying to start Snort...

ERROR: Unknown config directive: config disable_ipopt_alerts
Fatal Error, Quitting..

Is this a bug, a typo, or has this feature not been implemented yet, or
did I make a mistake here? Any ideas?

There's a typo in parser.c.

   3386     else if(!strcasecmp(config, "disable_tcpopt_alerts"))

Should be

   3386     else if(!strcasecmp(config, "disable_ipopt_alerts"))


Make that change in parser.c and all will be well.

See, release canidates are a good thing.  ;-)

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: