trouble with http_inspect

[Larry Wichman <larrywichman () yahoo com>]

I am having trouble config'n my http inspect preprocessor. I do not want Apache_Whitespace alerts. Here is my config:
 
preprocessor http_inspect: global \
    iis_unicode_map unicode.map 1252\
#
preprocessor http_inspect_server: server default \
    profile all ports { 80 8080 8180 } oversize_dir_length 500 \
    apache_whitespace no 
 
Here is my error:
ERROR: /etc/snort/snort.conf(290) => Invalid IIS codemap argument.
 
Line 290 is 'apache_whitespace no'
 
Can someone tell me what I am doing wrong?


                
---------------------------------
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.