Re: Invalid keyword 'Preprocessor' for global configuration

["Matt Olney" <molney () sourcefire com>]

At the end of your preprocessor SMTP line, you have a "\", which
continues the line into the preprocessor sfportscan line.

Try and remove the "\" at the end of 135 and try again.

preprocessor SMTP: ports { 25 465 691 } inspection_type stateful
normalize cmds valid_cmds { MAIL RCPT HELP HELO ETRN EHLO EXPN VRFY
ATRN SIZE BDAT DEBUG EMAL ESAM ESND ESOM EVFY IDENT NOOP RSET SEND
SAML SOML AUTH TURN ETRN PIPELINING CHUNKING DATA DSN RSET QUIT ONEX
QUEU STARTTLS TICK TIME TURNME VERB X-EXPS X-LINK2STATE XADR XAUTH
XCIR XEXCH50 XGEN XLICENSE XQUEU XSTA XTRN XUSR }       normalize_cmds
{ MAIL RCPT HELP HELO ETRN EHLO EXPN VRFY ATRN SIZE BDAT DEBUG EMAL
ESAM ESND ESOM EVFY IDENT NOOP RSET SEND SAML SOML AUTH TURN ETRN
PIPELINING CHUNKING DATA DSN RSET QUIT ONEX QUEU STARTTLS TICK TIME
TURNME VERB X-EXPS X-LINK2STATE XADR XAUTH XCIR XEXCH50 XGEN XLICENSE
XQUEU XSTA XTRN XUSR } \
preprocessor sfportscan: proto { all } sense_level { low } memcap {
10000000 } logfile { portscan.log }

Matt

On Fri, Dec 19, 2008 at 8:34 AM, Ramamohan Vatyam
<ramamohan.vatyam () ril com> wrote:
> Dear Snort Gurus,
>
>
>
> Please provide me solution for the below problem:
>
>
>
> 1. I have installed Snort 2.8.3.1 on Windows.
>
> 2. Using IDS policy Manager downloaded the latest rules and pushed to the
> sensor.
>
> 3. After restarting the sensor getting the error :
>
>
>
> C:\win-ids\Snort\etc\snort.conf(134) => Invalid keyword 'preprocessor' for
> 'global' configuration.
>
>
>
> Please find my snot.conf attached for your reference.
>
> Ph:+91-22-44772508
> HP:+91-9987001939
> E-Mail: ramamohan.vatyam () ril com
>
> "Confidentiality Warning: This message and any attachments are intended only
> for the use of the intended recipient(s).
> are confidential. and may be privileged. If you are not the intended
> recipient. you are hereby notified that any
> review. re-transmission. conversion to hard copy. copying. circulation or
> other use of this message and any attachments is
> strictly prohibited. If you are not the intended recipient. please notify
> the sender immediately by return email.
> and delete this message and any attachments from your system.
> Virus Warning: Although the company has taken reasonable precautions to
> ensure no viruses are present in this email.
> The company cannot accept responsibility for any loss or damage arising from
> the use of this email or attachment."
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users