Snort mailing list archives
RE: Anybody had this error?
From: "Harper, Patrick" <Patrick.Harper () phns com>
Date: Tue, 15 Feb 2005 13:25:38 -0600
Looks like you have a syntax error in a rule, grep them all for redalert (should be netbios.rules I think) and fix the error. -----Original Message----- From: John Ceballos-contr [mailto:John.Ceballos-contr () TRW COM] Sent: Tuesday, February 15, 2005 11:26 AM To: snort-users () lists sourceforge net Subject: [Snort-users] Anybody had this error? Hello all! I have this sensor who yesterday wasn't shutdown properly due to a power shortage in the building. We got it up today and the sensor looks like it is operating well but I have the snort.conf on the listening interface complaining when I do a /usr/local/bin/snort -i eth0 -c /var/snort.eth0/snort.conf The error I get after I do this is database: sensor id = 2 database: schema version = 106 database: using the "log" facility ERROR: ruletype redalert does not exist or has already been ordered. Fatal Error, Quitting.. I have done the following troubleshooting steps: ifconfig eth0 down and up reboot the sensor renamed the snort.conf copied over via Policy Manager a new snort.conf Has anyone had this problem? Thanks. ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Disclaimer: This electronic message, including any attachments, is confidential and intended solely for use of the intended recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have received this message in error, please delete it and notify the sender immediately. ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_ide95&alloc_id396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Anybody had this error? John Ceballos-contr (Feb 15)
- Re: Anybody had this error? Edin Dizdarevic (Feb 15)
- <Possible follow-ups>
- RE: Anybody had this error? Harper, Patrick (Feb 15)