Snort mailing list archives

Install of Snort2.1.1


From: "Brad Rose" <Brad () redibank com>
Date: Tue, 24 Feb 2004 17:41:15 -0700

Installing Snort2.1.0 or 2.1.1 jams up when starting snort.

The error I get is in the stream4 reassemble...

Any ideas...  Here is a dump of the screen

Initializing Network Interface eth1
OpenPcap() device eth1 network lookup:
        eth1: no IPv4 address assigned

        --== Initializing Snort ==--
Initializing Output Plugins!
Decoding Ethernet on interface eth1
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /etc/snort/snort.conf

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
No arguments to frag2 directive, setting defaults to:
    Fragment timeout: 60 seconds
    Fragment memory cap: 4194304 bytes
    Fragment min_ttl:   0
    Fragment ttl_limit: 5
    Fragment Problems: 0
    Self preservation threshold: 500
    Self preservation period: 90
    Suspend threshold: 1000
    Suspend period: 30
Stream4 config:
    Stateful inspection: ACTIVE
    Session statistics: INACTIVE
    Session timeout: 30 seconds
    Session memory cap: 8388608 bytes
    State alerts: INACTIVE
    Evasion alerts: INACTIVE
    Scan alerts: ACTIVE
    Log Flushed Streams: INACTIVE
    MinTTL: 1
    TTL Limit: 5
    Async Link: 0
    State Protection: 0
    Self preservation threshold: 50
    Self preservation period: 90
    Suspend threshold: 200
    Suspend period: 30
Stream4_reassemble config:
    Server reassembly: INACTIVE
    Client reassembly: ACTIVE
    Reassembler alerts: ACTIVE
    Zero out flushed packets: INACTIVE
    flush_data_diff_size: 500
    Ports: 21 23 25 53 80 110 111 143 513 1433
    Emergency Ports: 21 23 25 53 80 110 111 143 513 1433
ERROR:  unknown preprocessor "xdecode"
Fatal Error, Quitting..



Brad Rose
Asst. Cashier/Tek Geek
State Bank - La Junta
La Junta CO 81050
719-384-5901
719-469-0741 Cell
719-384-4550 (Fax)

_______________________________________________________________________

STATEMENT OF CONFIDENTIALITY:

Information contained in this message or any attachments to this message
are intended only for the  person(s) or entity to which it is addressed
and may contain confidential and/or privileged material as well as being
protected from disclosure. Any review, retransmission, dissemination or
other use of, or taking of any action in reliance upon, this information
by persons or entities other than the intended recipient is strictly
prohibited. If you received this in error, please contact us immediately
and delete the material from any computer. Thank You. The State Bank

__________________________________________
www.redibank.com

_______________________________________________________________________

STATEMENT OF CONFIDENTIALITY:

Information contained in this message or any attachments to this message are intended only for the  person(s) or entity 
to which it is addressed and may contain confidential and/or privileged material as well as being protected from 
disclosure. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this 
information by persons or entities other than the intended recipient is strictly prohibited. If you received this in 
error, please contact us immediately and delete the material from any computer. Thank You. The State Bank

__________________________________________
www.redibank.com




-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: