Re: Pulledpork modifyingsid error

[Shirkdog <shirkdog () gmail com>]

Is your issue resolved since you closed the issue on github?

If not, get the latest code and try again and reopen as necessary.
On Jun 29, 2016 11:32 AM, "Rahul Bhonsale" <rbhonsale () invariant-corp com>
wrote:

> I just updated to snort 2.9.8 and was running pulledpork for the new rules
> and have come across this error...
>
> Modifying Sids....
>         Modifying GID:1,SID:2010939 from:\$EXTERNAL_NET to:!$HOME_NET
>         Modifying GID:1,SID:2016149 from:\$EXTERNAL_NET to:$AMZIGNORE
>         Modifying GID:1,SID:2016150 from:\$EXTERNAL_NET to:$AMZIGNORE
>         Modifying GID:1,SID:2000419 from:\policy-violation to:\demote-rule
> Can't find Unicode property definition "o" at /usr/local/bin/pulledpork.pl
> line 838, <FH> line 4.
>
> I'm not really sure how to go about fixing this or where the problem lies.
> Please help.
> Rahul
>
> ------------------------------------------------------------------------------
> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
> Francisco, CA to explore cutting-edge tech and listen to tech luminaries
> present their vision of the future. This family event has something for
> everyone, including kids. Get more information and register today.
> http://sdm.link/attshape
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!