Snort mailing list archives
Re: 2.8.6 fatal error
From: "Alex Manchester" <amanchester () gmail com>
Date: Fri, 7 May 2010 17:20:12 -0400
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wally, Thanks for the advice. It definitely helped. I can now get snort up and running but now I have an issue with barnyard2. When running the ./configure option for snort, did you have to include any other additional --enable options? Reason I ask, is if I run barnyard2, I get a snort.conf errors relating to the decode options starting at line 87. Right now I am printing out all the README documentation and hopefully that will point me in the right direction. Alex - -----Original Message----- From: Jason Wallace [mailto:jason.r.wallace () gmail com] Sent: Friday, May 07, 2010 9:59 AM To: snort-users () lists sourceforge net Subject: Re: [Snort-users] 2.8.6 fatal error I had the same problem yesterday. Make sure when you ./configure you remember to use --enable-zlib Wally On Fri, May 7, 2010 at 9:33 AM, Alex Manchester <amanchester () gmail com> wrote:
I am in the process of installing Snort 2.8.6 within a vmImage of Ubuntu 10.4 server edition on an ESXI server. After installing all needed components ( I think), I try to run snort and get the following error "Error: /etc/snort/snort.conf(193) => Invalid keyword 'compress_depth' for 'global' configuration. Fatal Error, Quitting.." I checked out the new snort manual for some direction with this issue but according to the info within the manual, the data for preprocessor http_inspect falls within requirements. I didn't alter the original
settings
within the snort.conf file. The line in question reads :preprocessor http_inspect: global iis_unicode_map unicode.map 1252 compress_depth 20480 decompress_depth
20480
Any assistance or guidance would be greatly appreciated. Alex
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) iEYEARECAAYFAkvkhAYACgkQbYgPU3padp6XbQCfXCl50sOC7Z1dojnH+LanAFfH zCwAoLL7CG6eDpUPo9tfgs9ix2uoVMoZ =sBbW -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- 2.8.6 fatal error Alex Manchester (May 07)
- Re: 2.8.6 fatal error Jason Wallace (May 07)
- Re: 2.8.6 fatal error Alex Manchester (May 07)
- Re: 2.8.6 fatal error Jason Wallace (May 07)