SWF/PDF Decompression

["Simon Wesseldine" <simon.wesseldine () idappcom com>]

Hi,

has anybody else run into problems with version 2.9.8.0 and PDF/SWF
Decompression.

I am getting an error when running a configuration file that contains these
keywords:

 

decompress_swf

decompress_pdf

 

Snort will not load and I get an error pointing to these keywords being
included.

If I remove the keywords, then Snort will load fine.

 

My configuration file was working in the previous version of Snort.

I am using 'extended_response_inspection' as well.

 

Best regards,

Simon.

------------------------------------------------------------------------------

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!