Snort mailing list archives
Re: Error message
From: Matt Kettler <mkettler () evi-inc com>
Date: Fri, 16 Aug 2002 20:12:15 -0400
Agreed, as Jon said, look at line 46 of your snort.confFrom looking at the code I'd guess you have a snort.conf with a line 46 containing a valid rule indented by a space or two.. The snort parser tries to split a line up into a series of space delimited substrings, and the first one should be the "rule type", but in this case it's gotten a null string.
Given the default config having "var HOME_NET" near line 46, you probably introduced some misbehaved whitespace around there.
Juliano, if you still don't understand what the problem is, post line 46 of your snort.conf and any var's it references, or your whole snort.conf (censoring out HOME_NET and EXTERNAL_NET if you deem it important).
At 07:18 PM 8/16/2002 -0400, Jon Quiros wrote:
> +++++++++++++++++++++++++++++++++++++++++++++++++++ > Initializing rule chains... > ERROR line /usr/local/src/snort/snort.conf (46) => Unknown rule type > ((null)) > Fatal Error, Quitting.. I'd start by checking line 46 of snort.conf, > but that's just me. ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Error message Juliano Fontoura Pereira (Aug 16)
- Re: Error message Jon Quiros (Aug 16)
- Re: Error message Matt Kettler (Aug 16)
- Re: Error message Jon Quiros (Aug 16)