Re: Unknown rule option: 'sd_pattern'

[Ryan Jordan <ryan.jordan () sourcefire com>]

Joel's right. I suggest you either

a) turn on the sensitive data preprocessor, or
b) don't include the sensitive-data.rules file.

You can find more info in doc/README.sensitive_data.

-Ryan

On Thu, Jul 15, 2010 at 9:51 AM, Joel Esler <jesler () sourcefire com> wrote:
> Jens Link said:
> > Hi,
> >
> > when will this problem be fixes?
> >
> > ERROR: /etc/snort//rules/snort.rules(8746) Unknown rule option:
> > 'sd_pattern'.
> >
> > Snort version is 2.8.6.
> >
> > Yes it easy to fix this by deleting or disabling the rules in question
> > but it's a little bit annoying.
> >
> > I'm just asking my self it I should wait for an update or write some
> > shell script to disable this automatically.
>
>
> Looks like you don't have the sensitive data preprocessor turned on.
>
> Joel
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Sprint
> What will you do first with EVO, the first 4G phone?
> Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users