Snort mailing list archives

Re: Unknown rule option: 'sd_pattern'


From: Alex Kirk <akirk () sourcefire com>
Date: Thu, 15 Jul 2010 09:54:38 -0400

What's the SID in question here? I don't see that pattern anywhere in the SF
rule base, and if it's not ours, we can't fix it.

On Thu, Jul 15, 2010 at 9:31 AM, Jens Link <jenslink () gmx de> wrote:

Hi,

when will this problem be fixes?

ERROR: /etc/snort//rules/snort.rules(8746) Unknown rule option:
'sd_pattern'.

Snort version is 2.8.6.

Yes it easy to fix this by deleting or disabling the rules in question
but it's a little bit annoying.

I'm just asking my self it I should wait for an update or write some
shell script to disable this automatically.

cheers

Jens
--
-------------------------------------------------------------------------
| Foelderichstr. 40   | 13595 Berlin, Germany    | +49-151-18721264     |
| http://blog.quux.de | jabber: jenslink () guug de | -------------------  |
-------------------------------------------------------------------------


------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-- 
Alex Kirk
AEGIS Program Lead
Sourcefire Vulnerability Research Team
+1-410-423-1937
alex.kirk () sourcefire com
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: