Re: http_decode unknown preprocessor fatal error

[Nerijus Krukauskas <nk99 () delfi lt>]

Alessandro Fiorenzi wrote:
> Hi, I am using Snort 2.1.2 but when i start snort I get this error:
> /ERROR:  unknown preprocessor "À¸È    _decode"
> Fatal Error, Quitting../
>
> I have notice that the problem could be the http_decode; I am using the 
> defualt standard snort.conf with
> /preprocessor http_decode: 80 unicode iis_alt_unicode double_encode 
> iis_flip_slash full_whitespace
> /
> If I remove this option snort starts, but without http_decode.

  It should be http_inspect and with a very different syntax. Your 
snort.conf must be from older snort release. Get the current one and 
modify it according to the old one you have.

--
NK @ Vilnius
nk.tinkle.lt

Life is divided into the horrible and the miserable. -- Woody Allen, 
"Annie Hall"


-------------------------------------------------------
This SF.Net email is sponsored by: SourceForge.net Broadband
Sign-up now for SourceForge Broadband and get the fastest
6.0/768 connection for only $19.95/mo for the first 3 months!
http://ads.osdn.com/?ad_id%62&alloc_ida84&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users