Re: community.rules file - failure error during restart or start of snort

[Michael Brown <mike.a.brown09 () gmail com>]

Can you give us the same output when you have that line enabled?

---
Thank you,

Michael A. Brown
mike.a.brown09 () gmail com
(757) 912-0836
M.S. Forensic Studies: Computer Forensics
B.S. Information Technology: Network Specialist

"The only thing necessary for the triumph of evil is for good men to do
nothing" -Edmund Burke


On Wed, Apr 30, 2014 at 3:37 PM, Farnsworth, Robert <
robert.farnsworth () hp com> wrote:

>  LOL, that was after removing the community.rules entry from the
> snort.conf
>
>
>
> So yes it does start after removing or commenting out the
> $RULE_PATH/community.rules
>
>
>
> But does not start with the entry included in the file, hence the reason I
> am e-mailing this community.
>
>
>
> *From:* Joel Esler (jesler) [mailto:jesler () cisco com]
> *Sent:* Wednesday, April 30, 2014 3:33 PM
> *To:* Farnsworth, Robert
> *Cc:* waldo kitty; snort-users () lists sourceforge net
>
> *Subject:* Re: [Snort-users] community.rules file - failure error during
> restart or start of snort
>
>
>
> On Apr 30, 2014, at 3:21 PM, Farnsworth, Robert <robert.farnsworth () hp com>
> wrote:
>
>
>
>  Apr 30 14:49:55 serverx snort[23008]: [ID 702911 daemon.notice]
> Commencing packet processing (pid=23008)
>
>
>
> Looks like it started to me.
>
>
> ------------------------------------------------------------------------------
> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> Instantly run your Selenium tests across 300+ browser/OS combos.  Get
> unparalleled scalability from the best Selenium testing platform available.
> Simple to use. Nothing to install. Get started now for free."
> http://p.sf.net/sfu/SauceLabs
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos.  Get 
unparalleled scalability from the best Selenium testing platform available.
Simple to use. Nothing to install. Get started now for free."
http://p.sf.net/sfu/SauceLabs

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!