yaml parsing -- line number wrong
Stumbled upon an interesting situation -
@suricata:~$ sudo suricata -D -c /etc/suricata/peter-yaml/suricata-af-packet-mmap.yaml --af-packet=eth3  28/7/2012 -- 15:41:18 - (suricata.c:1206) <Info> (main) -- This is Suricata version 1.3dev (rev 43fce1e)  28/7/2012 -- 15:41:18 - (util-cpu.c:171) <Info> (UtilCpuPrintSummary) -- CPUs/cores online: 16 Failed to parse configuration file at line 558: could not find expected ':'
however the problem was with line 524 (in my yaml) where I had :
icmp: new: 30 established: 300 emergency-new: 10 emergency-established:5 - THE problem
was that it should have been:
emergency-established: 5 ( a space after the ":")
but the line numbering in reporting the err was totally off.