Re: Problem!!!

[Erek Adams <erek () snort org>]

On Mon, 24 Mar 2003, Paul Schmehl wrote:

> Your problem is staring you in the face.
>
> DUPLICATE output keyword.
>
> Search snort.conf for the world "output".  You will find that you have
> uncommented more than one output line.  You can only use one output
> line.  So decide which one you want to use and comment out the rest.

Actually, this isn't the case.  You can have more than one output line
with no problems.

The issue is that you have the same output plugin defined twice.  If I
test that, I get the same error.  If I have two output plugins listed I
don't.

Check out plugbase.c lines 624-690 (2.0 build 60 CVS).  If another
version:

        grep -in 'duplicate output' <snortdir>/*.c

To find it...

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users