Re: Another early morning fatal warning

[Matt Olney <molney () sourcefire com>]

Damn Mondays:

"Yes, the published rules are >>NOW<< 2.8.4. specific."

Matt

On Mon, May 4, 2009 at 9:07 AM, Matt Olney <molney () sourcefire com> wrote:
> Yes, the published rules are not 2.8.4 specific.
>
> Somewhere in the archives for this list would be about 50 emails about
> it, but the short short is that in order to use the latest detection
> set, you need to be at 2.8.4.
>
> Matt
>
> On Mon, May 4, 2009 at 8:36 AM, James Lay <jlay () slave-tothe-box net> wrote:
> > And another one ;)
> >
> > May  4 06:12:29 bpagateway snort[32645]: FATAL ERROR: Warning:
> > /chroot/snort/etc/snort/rules/web-misc.rules(534) => Unknown keyword
> >
> > Are rules now 2.8.4 specific?  Still on 2.8.3.
> >
> > J~
> >
> >
> >
> > ------------------------------------------------------------------------------
> > Register Now & Save for Velocity, the Web Performance & Operations
> > Conference from O'Reilly Media. Velocity features a full day of
> > expert-led, hands-on workshops and two days of sessions from industry
> > leaders in dedicated Performance & Operations tracks. Use code vel09scf
> > and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations 
Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf 
and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users