Snort mailing list archives

Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant ....


From: Michael Boman <michael.boman () boseco com>
Date: Mon, 07 Jun 2004 21:46:18 +0800

This is starting to become a FAQ...

http_decode preprocessor has been replaced with http_inspect, update
snort.conf accordingly (check out the manual for Snort on snort.org how
to configure it).

On Mon, 2004-06-07 at 16:39, soldier Mx wrote:
 Hey i upgraded Snort 2.0.5  to 2.1.2 and...

now i cant run Snort...
 I just upgraded, i didnt modify anything.. just 
made the up grade.... i think i have to change
something, but i dont know where to start..

here i show..

root@linux tripwire # /etc/init.d/snort status
 * status:  started
root@linux tripwire # /etc/init.d/snort zap
 * Manually resetting snort to stopped state.
root@linux tripwire # /etc/init.d/snort start
 * Starting snort...                                  
                   [ ok ]
root@linux tripwire # ps aux |grep snort
root     14550  0.0  0.3  1516  436 pts/2    S   
03:33   0:00 grep snort
root@linux tripwire #


How you can see, the daemon is not running and i get
this in the LOGS...


Jun  7 03:32:55 linux snort: Initializing daemon mode
Jun  7 03:32:55 linux snort: PID path stat checked out
ok, PID path set to /var/run/
Jun  7 03:32:55 linux snort: Writing PID "16857" to
file "/var/run//snort_eth0.pid"
Jun  7 03:32:56 linux snort: FATAL ERROR:  unknown
preprocessor "`k^\^H_decode"
Jun  7 03:32:55 linux kernel: device eth0 entered
promiscuous mode
Jun  7 03:32:56 linux kernel: device eth0 left
promiscuous mode



THankssss if you can help me!

from mexico

Best regards
 Michael Boman

-- 
Michael Boman <michael.boman () boseco com>
BOSECO Internet Security Solutions - http://www.boseco.com



-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: