Re: Understanding how to debug snort.config

[Russ <rucombs () cisco com>]

This looks like the same error others have reported recently.  If your 
lines look like the below you need to remove lzma from decompress_swf or 
install liblzma.  The error message is confusing because there is a bug 
with the error message itself.

Line 325: decompress_swf { deflate lzma } \

Line 326: decompress_pdf { deflate }



On 12/6/16 6:48 PM, wkitty42 () windstream net wrote:
> On 12/06/2016 05:26 PM, Jared F wrote:
> > I thought the (326) meant the line the error was coming from and although
> > there is a bracket there it doesn't look wrong.  Where should I start
> > learning how to troubleshoot snort?
>
> you are correct... the error was discovered at line 326... look above it to find
> the actual error... if you post that block, we can probably point the error out
> to you real quick...

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!