RE: snort new ruleset and vision rules

[Jason Long <Jason.Long () MicroMenders com>]

you have to do include: vision.rules, with the :

-----Original Message-----
From: Liam burke [mailto:lburke () lancomms ie]
Sent: Friday, August 24, 2001 9:03 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] snort new ruleset and vision rules


Whenever I try to load snort using the snort's ruleset and vision.rules it 
won't start.
<snip of snort.conf>
include vision.rules
<snd snip>

messages from syslog - 
Aug 24 16:54:40 engarde snort: Initializing daemon mode
Aug 24 16:54:41 engarde kernel: eth0: Setting promiscuous mode.
Aug 24 16:54:41 engarde kernel: device eth0 entered promiscuous mode
Aug 24 16:54:41 engarde snortd: snort startup succeeded
Aug 24 16:54:42 engarde kernel: device eth0 left promiscuous mode


and that's all.


Any ideas?
LB

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users