Snort mailing list archives
Re: Unknown rule option: 'sd_pattern'
From: Alex Kirk <akirk () sourcefire com>
Date: Thu, 15 Jul 2010 09:54:38 -0400
What's the SID in question here? I don't see that pattern anywhere in the SF rule base, and if it's not ours, we can't fix it. On Thu, Jul 15, 2010 at 9:31 AM, Jens Link <jenslink () gmx de> wrote:
Hi, when will this problem be fixes? ERROR: /etc/snort//rules/snort.rules(8746) Unknown rule option: 'sd_pattern'. Snort version is 2.8.6. Yes it easy to fix this by deleting or disabling the rules in question but it's a little bit annoying. I'm just asking my self it I should wait for an update or write some shell script to disable this automatically. cheers Jens -- ------------------------------------------------------------------------- | Foelderichstr. 40 | 13595 Berlin, Germany | +49-151-18721264 | | http://blog.quux.de | jabber: jenslink () guug de | ------------------- | ------------------------------------------------------------------------- ------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Alex Kirk AEGIS Program Lead Sourcefire Vulnerability Research Team +1-410-423-1937 alex.kirk () sourcefire com
------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Unknown rule option: 'sd_pattern' Jens Link (Jul 15)
- Re: Unknown rule option: 'sd_pattern' Alex Kirk (Jul 15)
- Re: Unknown rule option: 'sd_pattern' Joel Esler (Jul 15)
- Re: Unknown rule option: 'sd_pattern' Ryan Jordan (Jul 15)
- Re: Unknown rule option: 'sd_pattern' Jens Link (Jul 15)
- Re: Unknown rule option: 'sd_pattern' Russ Combs (Jul 15)