Package: snort-mysql Version: 2.9.0.1-2 Severity: normal By default, snort.conf includes the line
preprocessor http_inspect: global iis_unicode_map unicode.map 1252 compress_depth 65535 decompress_depth 65535 When compress_depth (and probably also decompress_depth) are there, and then you try to start snort with /etc/init.d/snort start, it fails, and the following appears in /var/log/daemon.log: FATAL ERROR: /etc/snort/snort.conf(195) => Invalid keyword 'compress_depth' for 'global' configuration. A quick Google search result makes me think that snort-mysql is being built without the --enable-zlib option. https://forums.snort.org/forums/support/topics/invalid-keyword-compress_depth-for-global-configuration There is another line in snort.conf that must be removed before it will start without zlib support: inspect_gzip \ I hope this helps! TY, Jeff -- System Information: Debian Release: squeeze/sid APT prefers stable APT policy: (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages snort-mysql depends on: ii adduser 3.112+nmu2 add and remove users and groups ii debconf [debconf-2.0] 1.5.36 Debian configuration management sy ii libc6 2.11.2-7 Embedded GNU C Library: Shared lib ii libdaq0 0.3-2 Data Acquisition library for packe ii libdumbnet1 1.12-3+b1 A dumb, portable networking librar ii libgcrypt11 1.4.5-2 LGPL Crypto library - runtime libr ii libgnutls26 2.8.6-1 the GNU TLS library - runtime libr ii libltdl7 2.2.6b-2 A system independent dlopen wrappe ii libmysqlclient16 5.1.49-3 MySQL database client library ii libpcap0.8 1.1.1-2 system interface for user-level pa ii libpcre3 8.02-1.1 Perl 5 Compatible Regular Expressi ii libprelude2 1.0.0-1 Security Information Management Sy ii logrotate 3.7.8-6 Log rotation utility ii rsyslog [system-log-dae 4.6.4-2 enhanced multi-threaded syslogd ii snort-common 2.9.0.1-2 flexible Network Intrusion Detecti ii snort-common-libraries 2.9.0.1-2 flexible Network Intrusion Detecti ii snort-rules-default 2.9.0.1-2 flexible Network Intrusion Detecti ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime Versions of packages snort-mysql recommends: ii iproute 20100519-3 networking and traffic control too Versions of packages snort-mysql suggests: pn snort-doc <none> (no description available) -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
