Snort mailing list archives

Snort config


From: Julien Dale via Snort-sigs <snort-sigs () lists snort org>
Date: Fri, 10 Apr 2020 21:00:22 +0000

Hopefully this is where I can send this. I’m trying to configure snort but I keep getting
ERROR: c:\Snort\etc\snort.conf(330) => Invalid keyword 'preprocessor' for server configuration.
Fatal Error, Quitting..

    u_encode yes \
    webroot no \
    #decompress_swf { deflate lzma } \
    #decompress_pdf { deflate }

# ONC-RPC normalization and anomaly detection.  For more information, see the Snort Manual, Configuring Snort - 
Preprocessors - RPC Decode
  preprocessor rpc_decode: 111 32770 32771 32772 32773 32774 32775 32776 32777 32778 32779 no_alert_multiple_requests 
no_alert_large_fragments no_alert_incomplete

Can someone help

Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!

Current thread: