Re: Another early morning fatal warning

[Joel Esler <jesler () sourcefire com>]

James Lay said:
> And another one ;)
>
> May  4 06:12:29 bpagateway snort[32645]: FATAL ERROR: Warning:
> /chroot/snort/etc/snort/rules/web-misc.rules(534) => Unknown keyword
>
> Are rules now 2.8.4 specific?  Still on 2.8.3.

The current release of 2.8.x is supported.  534 contains the http_header
keyword.  I suggest upgrading to current (2.8.4.1)

J

Attachment: _bin
Description:

------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations 
Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf 
and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users