RE: Fatal Error, Quitting..

[dlimanov () sct com]

That line correctly points to /etc/snort/rules..

Dimitri




"Harper, Patrick" <patrick.harper () phns com> 
04/26/2004 04:56 PM

To
<dlimanov () sct com>, <snort-users () lists sourceforge net>
cc

Subject
RE: [Snort-users] Fatal Error, Quitting..






look in your snort.conf for the RULE_PATH
 
 
var RULE_PATH /etc/snort/rules
 
Patrick S. Harper | CISSP RHCT MCSE
Information Security Engineer
patrick.harper () phns com

 

From: dlimanov () sct com [mailto:dlimanov () sct com] 
Sent: Monday, April 26, 2004 2:22 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Fatal Error, Quitting..


For some reason my snort install is blowing up loading rules file with the 
following error: 
"ERROR: Unable to open rules file: local.rules or /etc/snort/local.rules 
Fatal Error, Quitting.."
The problem here that it's trying to load the rules from /etc/snort/ and 
it's not there, since rules are located in /etc/snort/rules/ directory. I 
have checked my snort.conf file and for the life of me cannot see where 
it's getting /etc/snort/ from! 
Is there any other place where snort will get it's configuration, even 
when I run like this: snort -c /etc/snort/snort.conf ? Is there some other 
config location that I'm missing? 
Thanks,

Dimitri




Disclaimer:
This electronic message, including any attachments, is confidential and 
intended solely for use of the intended recipient(s). This message may 
contain information that is privileged or otherwise protected from 
disclosure by applicable law. Any unauthorized disclosure, dissemination, 
use or reproduction is strictly prohibited. If you have received this 
message in error, please delete it and notify the sender immediately.