Snort mailing list archives

Re: snort version 2.8.6.1 with 2.8.6.0 rules


From: Ryan Jordan <ryan.jordan () sourcefire com>
Date: Tue, 10 Aug 2010 16:01:08 -0400

Warning: /etc/snort/rules/snort.rules(48) => threshold (in rule) is
deprecated; use detection_filter instead.

This is just a warning meant for the rule-writer. The "threshold"
keyword will be removed at some point in the future, but we're
allowing time for all rules to migrate towards detection_filter &
event_filter.

ERROR: /etc/snort/rules/snort.rules(8867) Unknown rule option: 'sd_pattern'.

Either turn on the "sensitive_data" preprocessor, or turn off the
rules in sensitive-data.rules. The preprocessor enables the rule
option. These rules enable detection of credit card numbers & social
security numbers. See README.sensitive_data for more info.

-Ryan

------------------------------------------------------------------------------
This SF.net email is sponsored by 

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev 
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: