Snort mailing list archives

2.1.0 (build9) ERROR: unknown preprocessor "à_decode"


From: Tony Oger <tony.oger () free fr>
Date: Fri, 09 Jan 2004 14:08:43 +0100

Hi,

Just upgraded my Unstable Debian System. Snort upgraded to 2.1.0 (Build 9).
Since this upgrade i have the FATAL error :

titine:/etc/snort# /usr/sbin/snort -T -c /etc/snort/snort.conf
...

No arguments to frag2 directive, setting defaults to:
   Fragment timeout: 60 seconds
   Fragment memory cap: 4194304 bytes
   Fragment min_ttl:   0
   Fragment ttl_limit: 5
   Fragment Problems: 0
   Self preservation threshold: 500
   Self preservation period: 90
   Suspend threshold: 1000
   Suspend period: 30
Stream4 config:
   Stateful inspection: ACTIVE
   Session statistics: INACTIVE
   Session timeout: 30 seconds
   Session memory cap: 8388608 bytes
   State alerts: INACTIVE
   Evasion alerts: INACTIVE
   Scan alerts: ACTIVE
   Log Flushed Streams: INACTIVE
   MinTTL: 1
   TTL Limit: 5
   Async Link: 0
   State Protection: 0
   Self preservation threshold: 50
   Self preservation period: 90
   Suspend threshold: 200
   Suspend period: 30
Stream4_reassemble config:
   Server reassembly: INACTIVE
   Client reassembly: ACTIVE
   Reassembler alerts: ACTIVE
   Zero out flushed packets: INACTIVE
   flush_data_diff_size: 500
   Ports: 21 23 25 53 80 110 111 143 513 1433
   Emergency Ports: 21 23 25 53 80 110 111 143 513 1433
ERROR:  unknown preprocessor "à_decode"
Fatal Error, Quitting..

Recently , i just added some preprocessor portscan-ignorehosts, and preprocessor portscan2-ignorehosts directive in my config file. Think nothing to do with the error "a_decode"

Some library version information on the system :
gcc version 3.3.3 20031229 (prerelease) (Debian)
libc6          2.3.2.ds1-10   GNU C Library: Shared libraries and Timezone
libc6-dev      2.3.2.ds1-10   GNU C Library: Development Libraries and Hea

Thanks for your help.


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: