Re: Can't alert on most

[waldo kitty <wkitty42 () windstream net>]

On 3/5/2014 7:45 AM, Michael Wisniewski wrote:
> Please see quoted text below for answers...

inline posting... excellent! that's the way it should be done ;) thank you sir :)

> I did compile Snort myself.  I just used './configure' without any options.  I'm
> running it on Ubuntu 12.04 x86_64 with everything patched and up to date.

ahhhh... let's go do that again but this time use

    ./configure --enable-sourcefire

it should give you the best default options and it will be more of what VRT use 
and recommend... hopefully you won't have any problem reconfiguring, compiling 
and installing the new version...

NOTE: that's dash dash enable dash sourcefire... i've seen some mail clients 
screw it up by making it one large dash at the beginning which isn't right...

-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

------------------------------------------------------------------------------
Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!