[prev in list] [next in list] [prev in thread] [next in thread]
List: snort-users
Subject: Re: [Snort-users] decompress_pdf - error
From: "Cynthia Leonard \(cyleonar\) via Snort-users" <snort-users () lists ! snort ! org>
Date: 2017-10-25 7:51:33
Message-ID: 4e04e5f9a83c4d8f9a03d98faf25e617 () XCH-RTP-009 ! cisco ! com
[Download RAW message or body]
Hi Rabah,
This error can occur if liblzma (xz tools) is not installed on the system before running ./configure.
If conf has lines like the ones below you need to remove lzma from decompress_swf or install liblzma.
decompress_swf { deflate lzma } \
decompress_pdf { deflate }
Regards
Cynthia
From: Snort-users [mailto:snort-users-bounces@lists.snort.org] On Behalf Of Rabah Rahal
Sent: Wednesday, October 25, 2017 1:07 PM
To: snort-users@lists.snort.org
Subject: [Snort-users] decompress_pdf - error
Hi community,
I tried to install snort on windows, but i found a problem with the configuration file (snort.conf).
------ ERROR: c:\snort\etc\snort.conf<326> => Invalid Keyword '}' for server configuration.
When I check the ' snort.conf ' file, I found that the 326 ligne is : ' decompress_pdf { deflate } '.
What should I do ?
Thank's.
RAHAL Rabah
Phd student in computer science.
UBMA - Algérie.
+213.674.383.701
[Attachment #3 (text/html)]
<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"> <head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hi Rabah,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">This error can occur if \
liblzma (xz tools) is not installed on the system before running \
./configure.<o:p></o:p></span></p> <p class="MsoNormal"><span \
style="color:#1F497D">If conf has lines like the ones below you need to remove \
lzma from decompress_swf or install liblzma. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">decompress_swf { deflate lzma } \
\<o:p></o:p></span></p> <p class="MsoNormal"><span \
style="color:#1F497D">decompress_pdf { deflate }<o:p></o:p></span></p> <p \
class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p> <p \
class="MsoNormal"><span style="color:#1F497D">Regards<o:p></o:p></span></p> <p \
class="MsoNormal"><span style="color:#1F497D">Cynthia<o:p></o:p></span></p> <p \
class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p> <div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Snort-users \
[mailto:snort-users-bounces@lists.snort.org] <b>On Behalf Of </b>Rabah Rahal<br>
<b>Sent:</b> Wednesday, October 25, 2017 1:07 PM<br>
<b>To:</b> snort-users@lists.snort.org<br>
<b>Subject:</b> [Snort-users] decompress_pdf - error<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi community,<o:p></o:p></p>
<p class="MsoNormal">I tried to install snort on windows, but i found a problem with \
the configuration file (snort.conf).<o:p></o:p></p> <p class="MsoNormal">------ \
ERROR: c:\snort\etc\snort.conf<326> => Invalid Keyword ‘}’ for \
server configuration. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">When I check the ‘ snort.conf ’ file, I found that \
the 326 ligne is : ‘ decompress_pdf { deflate } ‘.<o:p></o:p></p> <p \
class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal">What should I do \
?<o:p></o:p></p> <p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank’s.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="background:white"><span \
style="font-size:12.0pt;color:black;mso-fareast-language:FR">RAHAL \
Rabah<o:p></o:p></span></p> <p class="MsoNormal" style="background:white"><span \
style="font-size:12.0pt;color:black;mso-fareast-language:FR">Phd student in computer \
science.<o:p></o:p></span></p> <p class="MsoNormal" style="background:white"><span \
lang="FR" style="font-size:12.0pt;color:black;mso-fareast-language:FR">UBMA - \
Algérie.<o:p></o:p></span></p> <p class="MsoNormal" style="background:white"><span \
lang="FR" style="font-size:12.0pt;color:black;mso-fareast-language:FR">+213.674.383.701<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"><o:p> </o:p></span></p>
</div>
</body>
</html>
_______________________________________________
Snort-users mailing list
Snort-users@lists.snort.org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users
Please visit http://blog.snort.org to stay current on all the latest Snort news!
Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
--===============2360559541342054847==--
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic