Snort mailing list archives

Error 43?


From: Rich Wild <wild.richard () epa gov>
Date: Fri, 25 May 2001 10:07:30 -0400


        I just installed snort and have the following error:
        --== Initializing Snort ==--

Initializing Network Interface eri0
Decoding Ethernet on interface eri0
Initializing Preprocessors!
Initializing Plug-ins!
Initializating Output Plugins!

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
ERROR snort.conf (43) => Couldn't resolve hostname outside

This is my snort.conf file:
# CHANGE THE NEXT LINE TO REFLECT YOUR NETWORK
# (Single system = your ip/32)
var HOME_NET  [xxx.xx.xxx.2/255]
#  you can define multiple networks in single variable (or use them directly in rules)
# var HOME_NET [10.1.1.0/24,10.1.2.0/24,192.168.1.0/24]

var EXTERNAL_NET outside network IPs
#---------------------------------------------

preprocessor http_decode: 80 8080
preprocessor minfrag: 128
# preprocessor portscan: 0.0.0.0/0 5/32 3 5 /var/log/snort/portscan.log
#                      ^^^^^^^^^^^    ^ ^ ^^^^^^^^^^^^^^^^^^^^^^^^^^^
#                               |     | |              |
#Your IP address or Network here+     | |              |
#                                     | |              |
#Ammount of ports being connected-----+ |              |

I changed var HOME_NET and preprocessor portscan......
can anyone help?  Please reply to me directly, I have not subscribed yet.

Thanks,

Rich

-- 
#########################################################################
# Rich  Wild - CSC Corporation              Voice (919) 541-1125        #
# Senior Systems Analyst, NERL-RTP, US EPA  FAX  (919) 541-4046         #
# 79 T.W. Alexander Drive                   EPA Maildrop 78-B           #
# Research Triangle Park, NC  27711         wild () hpcc epa gov           #
#########################################################################

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: