Project

General

Profile

Bug #513

Updated by Victor Julien over 11 years ago



 Stumbled upon an interesting situation -  

 <pre> 
 @suricata:~$ sudo suricata -D    -c    /etc/suricata/peter-yaml/suricata-af-packet-mmap.yaml --af-packet=eth3 
 [20831] 28/7/2012 -- 15:41:18 - (suricata.c:1206) <Info> (main) -- This is Suricata version 1.3dev (rev 43fce1e) 
 [20831] 28/7/2012 -- 15:41:18 - (util-cpu.c:171) <Info> (UtilCpuPrintSummary) -- CPUs/cores online: 16 
 Failed to parse configuration file at line 558: could not find expected ':' 
 </pre> 

 however the problem was with line 524 (in my yaml) where I had : 
 <pre> 
 icmp: 
  new: 30 
  established: 300 
  emergency-new: 10 
  emergency-established:5 - THE problem 
 </pre> 

 was that it should have been: 

  emergency-established: 5    ( a space after the ":") 

 but the line numbering in reporting the err was totally off. 
 


Back