SWF/PDF Decompression

"Simon Wesseldine" <[email protected]>
Newsgroups gmane.comp.security.ids.snort.devel
Message-ID <[email protected]>
Hi,

has anybody else run into problems with version 2.9.8.0 and PDF/SWF
Decompression.

I am getting an error when running a configuration file that contains these
keywords:

 

decompress_swf

decompress_pdf

 

Snort will not load and I get an error pointing to these keywords being
included.

If I remove the keywords, then Snort will load fine.

 

My configuration file was working in the previous version of Snort.

I am using 'extended_response_inspection' as well.

 

Best regards,

Simon.

------------------------------------------------------------------------------

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.