Re: snort 2.8.5 on x64 centos and "ERROR: Invalid argument: include"

[Todd Wease <twease () sourcefire com>]

On 10/05/2009 09:14 AM, Agent Smith wrote:
> I just installed snort 2.8.5 with the following configure;make ;make install. I didn't modify the default config file 
> and tried to run it and it gave me include errors like listed below. The only thing I changed was RULE_PATH and 
> that's it.
>
> /configure --enable-dynamicplugin --enable-timestats  --enable-ppm --enable-perfprofiling  --enable-gre --with-mysql 
> --libdir=/usr/lib64 --with-libdir=lib64 --with-mysql-libraries=/usr/lib64/mysql/
>
> var RULE_PATH /etc/snort/rules
>
> # snort -i eth3 -c /etc/snort/etc/snort.conf  --dynamic-preprocessor-lib-dir /usr/local/lib/snort_dynamicpreprocessor 
> -vvv
> ..
> ..
> ..
> Portscan Detection Config:
>      Detect Protocols:  TCP UDP ICMP IP
>      Detect Scan Type:  portscan portsweep decoy_portscan distributed_portscan
>      Sensitivity Level: Low
>      Memcap (in bytes): 10000000
>      Number of Nodes:   31347
> ERROR: Invalid argument: include
> Fatal Error, Quitting..
>
>
> Anyone? I don't even know where to look. Its a 64bit centos 5 install.

Can you take a look at your dns and ssh configurations - looks like it 
might be coming from one of those.  If you don't find any problems, can 
you post your snort.conf or send to me directly? (obfuscate any 
sensitive information in it first)

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users