config parser feature/failure?

[Thomas Linden <tom () daemon de>]

Hi,

I tried to add my own ruletype definition in my snort.conf. My first try:

ruletype icmp_info {
  type alert
  output alert_fast: icmp.info.log
}

ended up with the following error-message:

ERROR line /etc/snort.conf (25): Type not defined for rule file
declaration: icmp_info

then I changed it to:

ruletype icmp_info
{
  type alert
  output alert_fast: icmp.info.log
}

and, voilá! it worked.


IMO it would be nice if the first "coding style" could work too :-)



kind regards, Tom



-- 
=> PGP key:  http://daemon.de/key.txt 
=> "Experience is what you got  when
=>  you did not get what you wanted."


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users