RE: ERROR: unknown preprocessor "http_decode"

[Warner Joseph <Joseph.Warner () siemens com>]

Well duh!  It says at the top of /usr/local/share/snort/snort.conf:

http://www.snort.org     Snort 2.0.0 Ruleset

..and then /usr/local/etc/snort.conf-sample:

 http://www.snort.org     Snort 2.1.0 Ruleset

..<sigh>

Sorry for not noticing that earlier..


-Joe


-----Original Message-----
From: james [mailto:hackerwacker () cybermesa com]
Sent: Friday, January 16, 2004 1:21 PM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] ERROR: unknown preprocessor "http_decode"


Did you use the conf from the new Snort or your existing install ?
Always do a diff on the conf to see what has changed, when upgrading.

james


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------------
This message and any included attachments are from Siemens Medical Solutions 
USA, Inc. and are intended only for the addressee(s).  
The information contained herein may include trade secrets or privileged or 
otherwise confidential information.  Unauthorized review, forwarding, printing, 
copying, distributing, or using such information is strictly prohibited and may 
be unlawful.  If you received this message in error, or have reason to believe 
you are not authorized to receive it, please promptly delete this message and 
notify the sender by e-mail with a copy to Central.SecurityOffice () shs siemens com 

Thank you


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users