Snort mailing list archives

RE: Snort Fails To Start @ Boot-Fedora3


From: "Schmehl, Paul L" <pauls () utdallas edu>
Date: Wed, 30 Mar 2005 03:02:29 -0600

-----Original Message-----
From: snort-users-admin () lists sourceforge net 
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of 
Mark Sargent
Sent: Wednesday, March 30, 2005 1:41 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort Fails To Start @ Boot-Fedora3

Hi All,

snort is failing to start at boot. It gives an error related 
to this line in the /etc/snort/snort.conf file,

preprocessor http_inspect: global \
    iis_unicode_map unicode.map 1252

unfortunately the error is not being reported in 
/var/log/messages or /var/log/boot.log.

I don't really understand it at all. I'm using Fedora3. Cheers.

Most likely it's because snort can't find unicode.map.  Locate the file
and put it in the same location as your rules.
 
Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/ 


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: