Re: Snort config

[wkitty42--- via Snort-sigs <snort-sigs () lists snort org>]

On 4/10/20 5:00 PM, Julien Dale via Snort-sigs wrote:
> Hopefully this is where I can send this. I’m trying to configure snort but I 
> keep getting
>
> ERROR: c:\Snort\etc\snort.conf(330) => Invalid keyword 'preprocessor' for server 
> configuration.
>
> Fatal Error, Quitting..
>
>      u_encode yes \
>
>      webroot no \
>
>      #decompress_swf { deflate lzma } \
>
>      #decompress_pdf { deflate }

if you are going to comment out the last line of a continuation, you have to 
remove the '\' on the new last line higher above...

in actuality, the problem you are trying to solve is "lzma" in the next to last 
line... just remove that and you should be ok...


        u_encode yes \
        webroot no \
#       decompress_swf { deflate lzma } \
        decompress_swf { deflate } \
        decompress_pdf { deflate }




--
 NOTE: No off-list assistance is given without prior approval.
       *Please keep mailing list traffic on the list where it belongs!*
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" 
https://snort.org/downloads/#rule-downloads";>emerging threats</a>!