Re: Error: /etc/snort/snort.conf(291) => invalid stream tcp policy option

["Carter Waxman (cwaxman)" <cwaxman () cisco com>]

The screenshot ends at line 290. Could you please show a little more of the conf?

Thanks
Carter

From: priyank shah <priyankshah902002 () gmail com<mailto:priyankshah902002 () gmail com>>
Date: Thursday, February 18, 2016 at 3:28 PM
To: "Vishnu Sriram (visriram)" <visriram () cisco com<mailto:visriram () cisco com>>
Cc: "snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>" <snort-users () lists 
sourceforge net<mailto:snort-users () lists sourceforge net>>
Subject: Re: [Snort-users] Error: /etc/snort/snort.conf(291) => invalid stream tcp policy option

Hello Snort-users,

I am attaching a screenshot of the snort.conf file.

Thanks,
Pri

On Thu, Feb 18, 2016 at 10:58 AM, priyank shah <priyankshah902002 () gmail com<mailto:priyankshah902002 () gmail com>> 
wrote:
Hello Snort-users,

I am attaching my config file.

Thank you
Pri

On Thu, Feb 18, 2016 at 10:52 AM, Vishnu Sriram (visriram) <visriram () cisco com<mailto:visriram () cisco com>> wrote:
Hi,

         Can you please share your conf file? It seems there is a parsing error at line 291 in snort.conf.


Regards,
Vishnu.

[http://www.cisco.com/web/europe/images/email/signature/logo05.jpg]

Vishnu Sriram
ENGINEER.SOFTWARE ENGINEERING
visriram () cisco com<mailto:visriram () cisco com>
Phone:

Cisco Systems Limited




IN
Cisco.com<http://www.cisco.com>





[Think before you print.]Think before you print.

This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, 
use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized 
to receive for the recipient), please contact the sender by reply email and delete all copies of this message.
For corporate legal information go to:
http://www.cisco.com/web/about/doing_business/legal/cri/index.html



From: priyank shah [mailto:priyankshah902002 () gmail com<mailto:priyankshah902002 () gmail com>]
Sent: Thursday, February 18, 2016 4:14 PM
To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>
Subject: [Snort-users] Error: /etc/snort/snort.conf(291) => invalid stream tcp policy option

Hello Snort-users,

I tried installing snort-2.9.8.0 on ubuntu 15.10 that I am running on Oracle VirtualBox. After the installation I tried 
running

sudo snort -T -i eth0 -c /etc/snort/snort.conf

to check the configuration.
But I got an error saying

Error: /etc/snort/snort.conf(291) => Invalid Stream TCP policy option
Fatal Error, Quitting..

Can anyone please help.

Thanks,
Pri

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!