Suricata

Stumbled upon an interesting situation -

@suricata:~$ sudo suricata -D  -c  /etc/suricata/peter-yaml/suricata-af-packet-mmap.yaml --af-packet=eth3
[20831] 28/7/2012 -- 15:41:18 - (suricata.c:1206) <Info> (main) -- This is Suricata version 1.3dev (rev 43fce1e)
[20831] 28/7/2012 -- 15:41:18 - (util-cpu.c:171) <Info> (UtilCpuPrintSummary) -- CPUs/cores online: 16
Failed to parse configuration file at line 558: could not find expected ':'

however the problem was with line 524 (in my yaml) where I had :

icmp:
 new: 30
 established: 300
 emergency-new: 10
 emergency-established:5 - THE problem

was that it should have been:

emergency-established: 5  ( a space after the ":")

but the line numbering in reporting the err was totally off.