Bug #513
Updated by Victor Julien over 12 years ago
Stumbled upon an interesting situation - <pre> @suricata:~$ sudo suricata -D -c /etc/suricata/peter-yaml/suricata-af-packet-mmap.yaml --af-packet=eth3 [20831] 28/7/2012 -- 15:41:18 - (suricata.c:1206) <Info> (main) -- This is Suricata version 1.3dev (rev 43fce1e) [20831] 28/7/2012 -- 15:41:18 - (util-cpu.c:171) <Info> (UtilCpuPrintSummary) -- CPUs/cores online: 16 Failed to parse configuration file at line 558: could not find expected ':' </pre> however the problem was with line 524 (in my yaml) where I had : <pre> icmp: new: 30 established: 300 emergency-new: 10 emergency-established:5 - THE problem </pre> was that it should have been: emergency-established: 5 ( a space after the ":") but the line numbering in reporting the err was totally off.