Re: Problem!!!

["Andrew R. Baker" <andrewb () snort org>]

Paul Schmehl wrote:
> On Thu, 2003-03-20 at 11:53, Leonardo Maciel wrote:
>
> > As much as started the snort he presents the following error:
> > ERROR (null) (0) => Duplicate output keyword!
>
> Your problem is staring you in the face.
>
> DUPLICATE output keyword.
>
> Search snort.conf for the world "output".  You will find that you have
> uncommented more than one output line.  You can only use one output
> line.  So decide which one you want to use and comment out the rest.


Actually, you are wrong on multiple counts.  The problem here is an 
issue of multiple calls to RegisterOutputPlugin() with the same keyword. 
   For a first glance, look at src/plugins.c:InitOutputPlugins().  Look 
for two identical XXXSetup(); function calls.  For a guess, I would 
think that this is a patched version of Snort.  If not, can you please 
send the configure line used to build Snort and the version and build 
numbers.


Also, it is perfectly fine to use as many output plugins as you want. 
However, too many will slow things down.

-A



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users