Snort mailing list archives

Re: 2.8.6 fatal error


From: "Alex Manchester" <amanchester () gmail com>
Date: Fri, 7 May 2010 17:20:12 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Wally, 
Thanks for the advice. It definitely helped. I can now get snort up and
running but now I have an issue with barnyard2. When running the ./configure
option for snort, did you have to include any other additional --enable
options? Reason I ask, is if I run barnyard2, I get a snort.conf errors
relating to the decode options starting at line 87. Right now I am printing
out all the README documentation and hopefully that will point me in the
right direction. 

Alex 


- -----Original Message-----
From: Jason Wallace [mailto:jason.r.wallace () gmail com] 
Sent: Friday, May 07, 2010 9:59 AM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] 2.8.6 fatal error

I had the same problem yesterday.

Make sure when you ./configure you remember to use --enable-zlib

Wally



On Fri, May 7, 2010 at 9:33 AM, Alex Manchester <amanchester () gmail com>
wrote:

I am in the process of installing Snort 2.8.6 within a vmImage of Ubuntu
10.4 server edition on an ESXI server. After installing all needed
components ( I think), I try to run snort and get the following error
"Error: /etc/snort/snort.conf(193) => Invalid keyword 'compress_depth' for
'global' configuration. Fatal Error, Quitting.."

I checked out the new snort manual for some direction with this issue but
according to the info within the manual, the data for preprocessor
http_inspect falls within requirements. I didn't alter the original
settings
within the snort.conf file.
The line in question reads :preprocessor http_inspect: global
iis_unicode_map unicode.map 1252 compress_depth 20480 decompress_depth
20480


Any assistance or guidance would be greatly appreciated.

Alex


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iEYEARECAAYFAkvkhAYACgkQbYgPU3padp6XbQCfXCl50sOC7Z1dojnH+LanAFfH
zCwAoLL7CG6eDpUPo9tfgs9ix2uoVMoZ
=sBbW
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: