Snort mailing list archives
Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo
From: "Castle, Shane" <scastle () bouldercounty org>
Date: Mon, 19 Nov 2012 17:25:23 +0000
Um - RULE_PATH in snort.conf? Also see SO_RULE_PATH and PREPROC_RULE_PATH. -- Shane Castle Data Security Mgr, Boulder County IT -----Original Message----- From: waldo kitty [mailto:wkitty42 () windstream net] Sent: Monday, November 19, 2012 09:51 To: snort-users () lists sourceforge net Subject: [Snort-users] can't remember why... snot prepends /etc/ to paths resulting in /etc//foo i know i've seen this discussed before and the solution was found but i cannot locate anything about it... the list archives do not appear to be easily searchable from sourceforge, either... anyway, we're seeing snort prepending /etc/ to paths for the rules (at least) and haven't found the cause... the message is like the following... Nov 18 22:45:22 voyager snort[21527]: FATAL ERROR: /etc//var/snort/rules/attack-responses.rules(0) Unable to open rules file "/etc//var/snort/rules/attack-responses.rules": No such file or directory. this is with snort 2.9.3.1... ------------------------------------------------------------------------------ Monitor your physical, virtual and cloud infrastructure from a single web console. Get in-depth insight into apps, servers, databases, vmware, SAP, cloud infrastructure, etc. Download 30-day Free Trial. Pricing starts from $795 for 25 servers or applications! http://p.sf.net/sfu/zoho_dev2dev_nov _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news! ------------------------------------------------------------------------------ Monitor your physical, virtual and cloud infrastructure from a single web console. Get in-depth insight into apps, servers, databases, vmware, SAP, cloud infrastructure, etc. Download 30-day Free Trial. Pricing starts from $795 for 25 servers or applications! http://p.sf.net/sfu/zoho_dev2dev_nov _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- can't remember why... snot prepends /etc/ to paths resulting in /etc//foo waldo kitty (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo Castle, Shane (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo waldo kitty (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo Castle, Shane (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo waldo kitty (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo Todd Wease (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo waldo kitty (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo Paul Schmehl (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo Castle, Shane (Nov 19)