Snort mailing list archives

Fatal error when starting snort on the sensor


From: Juan Fernandez <Juan.Fernandez () deltathree com>
Date: Fri, 17 Sep 2004 21:11:13 +0300

Hi Guys!!    

 

When I start snort manually from the command line /etc/init.d/snort start I
see that snort starts:

 

Starting Intrusion Database System: SNORT

SNORT is up and running!

 

On /var/log/messeges I see:

 

Sep 17 21:02:54 sensjrlan snort: FATAL ERROR: /etc/snort/snort.conf(458) =>
Unknown rule type: ports

 

In snort.conf the 458 line is this:

 

output database: alert, mysql, user=snort password=snort dbname=snort
host=208.170.171.199 sensor_name=sensjrlan

 

Mysql and acid are on another server (208.170.171.199) I checked that I can
telnet to port 3306 so what's wrong ?

 

Thanks very much!!!

 

 


Current thread: