Re: Error snort -c -T /etc/snort/snort.conf

[Bennett Todd <bet () rahul net>]

2004-02-26T01:53:30 M. Salman Farisi:
> root@localhost /root# snort -T -c /etc/snort/snort.conf
> Running in IDS mode
> Log directory = /var/log/snort
>
> Initializing Network Interface eth0
> ERROR: OpenPcap() FSM compilation failed:
>         parse error
> PCAP command: /etc/snort/snort.conf
> Fatal Error, Quitting..

What platform? What version of snort? Where did your snortrules come
from, when? What changes (if any) have you made to them?

I just ran that with snort 2.1.1, last night's download of
snortrules-snapshot-2_1.tar.gz, with RULE_PATH fixed up to
/etc/snort and a handful of sids (480, 527, 528, 1411, 1417, 1923,
and 2189) #-ed out, built on my bent linux distro, statically linked
against uClibc with cpw's libpcap-0.8.20040115.

Didn't reproduce your error.

-Bennett

Attachment: _bin
Description: