Snort mailing list archives

Re: DPX starter kit output: No alert generated


From: Jianyu Li via Snort-users <snort-users () lists snort org>
Date: Thu, 18 Oct 2018 19:42:28 +0000

Hi wkitty42,

Yes I changed that line like you did, but the output is the same, I am still not sure why.

________________________________
From: Snort-users <snort-users-bounces () lists snort org> on behalf of wkitty42--- via Snort-users <snort-users () 
lists snort org>
Sent: 18 October 2018 17:45
To: snort-users () lists snort org
Subject: Re: [Snort-users] DPX starter kit output: No alert generated

On 10/17/18 5:45 PM, Jianyu Li via Snort-users wrote:
The content of test.sh is:

    root@ubuntu3:~/dpx-1.7# cat test.sh
    #!/bin/bash

    if [ ! -e setup.sh ] ; then
        echo "ERROR: you must echo SNORT=/path/to/snort/dir > setup.sh first"
        exit -1
    fi

    . ./setup.sh

    export SNORT_PP_DEBUG=0x80000000
    $SNORT/src/snort -c test/snort.conf -A console:test -r test/test.pcap

did you change this above line to read like this?

   $SNORT/src/snort -c test/snort.conf -A console:test -r test/test.pcap -k none


--
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list unless*
        *a signed and pre-paid contract is in effect with us.*
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Current thread: