Snort mailing list archives

issue of installing Snort_2.8.4.1 and Barnyard2 in Ubunto 9.10


From: Jun Wan <junwei_wan () hotmail com>
Date: Wed, 3 Mar 2010 23:27:29 +0000


Hi,

I am new to Snort, I followed the instructions on this url:  https://wwwx.cs.unc.edu/~hays/archives/work/index.php

All went well until I reached the following stage:

  "Now a quick test. Run the following and see if snort runs:

sudo snort -c /etc/snort/snort.conf -i eth1"

After running the command line above, I got the following outcomes:

Running in IDS mode

        --== Initializing Snort ==--
Initializing Output Plugins!
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /etc/snort/snort.conf
Var 'HOME_NET' redefined
PortVar 'HTTP_PORTS' defined :  [ 80 ]
PortVar 'SHELLCODE_PORTS' defined :  [ 0:79 81:65535 ]
PortVar 'ORACLE_PORTS' defined :  [ 1521 ]
Frag3 global config:
.....
.....

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
ERROR: Undefined variable name: (/etc/snort/rules/bad-traffic.rules:27): EXTERNAL_NET
Fatal Error, Quitting..

Is there anyone know what's this all about? Would you please let me know "how to" fix this "Fatal Error"?  what should 
I do next?

Any information and help would be much appreciated.

Regards

John


                                          
_________________________________________________________________
Browse profiles for FREE! Meet local singles online.
http://clk.atdmt.com/NMN/go/150855801/direct/01/
------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: