Re: AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode"

[Tony Oger <tony.oger () free fr>]

> I would suggest running through your snort.conf and searching for "decode"
> (without the quotes) somewhere after preprocessor stream4. Seems to me that
> a typo has made it accidently into the file
>  
Thanks Poppi,

I first thought this was typo error as you told me, but do not succeed 
where would be this typo error.
Here is the decode occurence in my config file.

#grep -v '^#' snort.conf |grep decode
preprocessor http_decode: 80 unicode iis_alt_unicode double_encode 
iis_flip_slash full_whitespace
preprocessor rpc_decode: 111 32771
preprocessor telnet_decode

> > 111 143 513 1433
> >    Emergency Ports: 21 23 25 53 80 110 111 143 513 1433
> > ERROR:  unknown preprocessor "à_decode"
> > Fatal Error, Quitting..
> >
> > Recently , i just added some preprocessor portscan-ignorehosts, and 
> > preprocessor portscan2-ignorehosts directive in my config file. Think 
> > nothing to do with the error "a_decode"
> >
> > Some library version information on the system :
> > gcc version 3.3.3 20031229 (prerelease) (Debian)
> > libc6          2.3.2.ds1-10   GNU C Library: Shared libraries 
> > and Timezone
> > libc6-dev      2.3.2.ds1-10   GNU C Library: Development 
> > Libraries and Hea
> >
> > Thanks for your help.
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: Perforce Software.
> > Perforce is the Fast Software Configuration Management System offering
> > advanced branching capabilities and atomic changes on 50+ platforms.
> > Free Eval! http://www.perforce.com/perforce/loadprog.html
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >    
>
>  


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users