Re: Unable to create stub so rules files

[Peter Bates <peter.bates () ucl ac uk>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello all

On 27/11/2012 14:47, C. L. Martinez wrote:
> Nop, every time pp runs, creates an empty so_rules.rules file with the
> same error described above ...

The same error will appear because PP tries to validate your Snort
configuration file and also looks for certain settings in there 
(such as dynamicengine/dynamicdetection directory)

If you comment out your rule include lines, does 

snort -i ethX -c /location/of/snort.conf -T

run to completion?

- -- 
Peter Bates
Senior Information Security Officer   Phone: +44(0)2076792049
Information Services Division         Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJQtNXgAAoJELhVoVpEMS6Rv8AIALH5zH0Un4ZWpHlomu8N3JHN
NdX/LzHJvkxLzd93wbp/qoGcQ4dl5SMo01gfzh5QjCqgJJ23jDpFXwCnB5uDyx16
8rNQL/S4AtKokPgLgd168phKs1p0dqtyiYLlq7ysabSL59tXnvDFNMmjhM2hvZFb
1YIEv3GPpvWKW79PpuIUfZY0LBbi3Y7oP8FIuj/m6Bq26vWxp1K4hMdtyWWTQgK4
i6ioRpNHZImgXOf2gs6qYypqqVRDfGOho0uNkGWvD8RYS62mHk8lfdN30+/bmkpC
QZLHtJj8Xq1xQfJPRnCU4XPcDlP6mJ0v1kdtNGdyYFYSE3D4jF8Aq0kyD3cHJQg=
=MU1R
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Monitor your physical, virtual and cloud infrastructure from a single
web console. Get in-depth insight into apps, servers, databases, vmware,
SAP, cloud infrastructure, etc. Download 30-day Free Trial.
Pricing starts from $795 for 25 servers or applications!
http://p.sf.net/sfu/zoho_dev2dev_nov
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!