Snort mailing list archives
Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant ....
From: Michael Boman <michael.boman () boseco com>
Date: Mon, 07 Jun 2004 21:46:18 +0800
This is starting to become a FAQ... http_decode preprocessor has been replaced with http_inspect, update snort.conf accordingly (check out the manual for Snort on snort.org how to configure it). On Mon, 2004-06-07 at 16:39, soldier Mx wrote:
Hey i upgraded Snort 2.0.5 to 2.1.2 and... now i cant run Snort... I just upgraded, i didnt modify anything.. just made the up grade.... i think i have to change something, but i dont know where to start.. here i show.. root@linux tripwire # /etc/init.d/snort status * status: started root@linux tripwire # /etc/init.d/snort zap * Manually resetting snort to stopped state. root@linux tripwire # /etc/init.d/snort start * Starting snort... [ ok ] root@linux tripwire # ps aux |grep snort root 14550 0.0 0.3 1516 436 pts/2 S 03:33 0:00 grep snort root@linux tripwire # How you can see, the daemon is not running and i get this in the LOGS... Jun 7 03:32:55 linux snort: Initializing daemon mode Jun 7 03:32:55 linux snort: PID path stat checked out ok, PID path set to /var/run/ Jun 7 03:32:55 linux snort: Writing PID "16857" to file "/var/run//snort_eth0.pid" Jun 7 03:32:56 linux snort: FATAL ERROR: unknown preprocessor "`k^\^H_decode" Jun 7 03:32:55 linux kernel: device eth0 entered promiscuous mode Jun 7 03:32:56 linux kernel: device eth0 left promiscuous mode THankssss if you can help me! from mexico
Best regards Michael Boman -- Michael Boman <michael.boman () boseco com> BOSECO Internet Security Solutions - http://www.boseco.com ------------------------------------------------------- This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Flex-Response, anyone using it? Dusty Hall (May 19)
- Re: Flex-Response, anyone using it? Paul Schmehl (May 19)
- Re: Flex-Response, anyone using it? Jason Haar (May 19)
- Re: Flex-Response, anyone using it? James Riden (May 19)
- Re: Flex-Response, anyone using it? Jason (May 19)
- Re: Flex-Response, anyone using it? James Riden (May 19)
- Re: Flex-Response, anyone using it? Jason (May 20)
- Re: Flex-Response, anyone using it? Jason (May 26)
- Re: Flex-Response, anyone using it? Jason Haar (May 19)
- Re: Flex-Response, anyone using it? Paul Schmehl (May 19)
- Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... soldier Mx (Jun 07)
- Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... Michael Boman (Jun 07)
- Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... Michael Boman (Jun 09)
- Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... soldier Mx (Jun 10)
- Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... Michael Boman (Jun 10)
- <Possible follow-ups>
- FW: Flex-Response, anyone using it? IDont ThinkSo (May 20)
- Re: FW: Flex-Response, anyone using it? Paul Schmehl (May 20)
- RE: Flex-Response, anyone using it? CGhercoias (May 20)
- Re: Flex-Response, anyone using it? James Riden (May 20)