Snort mailing list archives

SnortCenter-Acid-SuSE byte_test issue


From: "Mike Feetham" <mike.feetham () percepta-crm com>
Date: Wed, 19 May 2004 15:55:09 -0400

Hi folks,

I've been trying to get Snort running with SnortCenter and ACID on SuSE 9.0,
but running into some issues.  I used Steven Scott's Implementation guide
for Redhat 9.0 for guidance as much as possible.

Everything has loaded fine, and I got everything installed and configured up
to the point where I tell SnortCenter what rules to use on the sensor.  I
selected "Use Default Active Snort Ruleset" and pushed the config to the
sensor with no problems (also configured the home_net and external_net
variables).

When I tell SnortCenter to start the sensor, the sensor kicks back the
following error:

ERROR: ERROR /etc/snort/snort.eth0.conf (444): Bad arguments to byte_test: 
Fatal Error, Quitting..

At first I was just going to disable the rule so I could continue testing,
but the same error is coming up for just about every rule that includes
"byte_test".

The rules have not been modified and were downloaded through SnortCenter on
May 17.

Has anyone seen this, or have any suggestions?

Versions:
SuSE 9.0
Snort 2.1.3RC1




-------------------------------------------------------
This SF.Net email is sponsored by: SourceForge.net Broadband
Sign-up now for SourceForge Broadband and get the fastest
6.0/768 connection for only $19.95/mo for the first 3 months!
http://ads.osdn.com/?ad_id%62&alloc_ida84&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: