Snort mailing list archives
Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo
From: "Castle, Shane" <scastle () bouldercounty org>
Date: Mon, 19 Nov 2012 17:50:36 +0000
What's this? -> var $SNORT_HOME /var/snort You have a "$" there incorrectly, I think, and something goofy is happening. FWIW, I don't have that var anywhere in my snort.conf. Maybe this var is set in a parent startup shell script and somehow the redef is appending to it? -- Shane Castle Data Security Mgr, Boulder County IT -----Original Message----- From: waldo kitty [mailto:wkitty42 () windstream net] Sent: Monday, November 19, 2012 10:37 To: snort-users () lists sourceforge net Subject: Re: [Snort-users] can't remember why... snot prepends /etc/ to paths resulting in /etc//foo On 11/19/2012 12:25, Castle, Shane wrote:
Um - RULE_PATH in snort.conf? Also see SO_RULE_PATH and PREPROC_RULE_PATH.
yeah, all those are set or else it wouldn't have that part of the path in the error messages... var $SNORT_HOME /var/snort var RULE_PATH $SNORT_HOME/rules var SO_RULE_PATH $SNORT_HOME/so_rules var PREPROC_PATH $SNORT_HOME/preproc_rules ------------------------------------------------------------------------------ Monitor your physical, virtual and cloud infrastructure from a single web console. Get in-depth insight into apps, servers, databases, vmware, SAP, cloud infrastructure, etc. Download 30-day Free Trial. Pricing starts from $795 for 25 servers or applications! http://p.sf.net/sfu/zoho_dev2dev_nov _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news! ------------------------------------------------------------------------------ Monitor your physical, virtual and cloud infrastructure from a single web console. Get in-depth insight into apps, servers, databases, vmware, SAP, cloud infrastructure, etc. Download 30-day Free Trial. Pricing starts from $795 for 25 servers or applications! http://p.sf.net/sfu/zoho_dev2dev_nov _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- can't remember why... snot prepends /etc/ to paths resulting in /etc//foo waldo kitty (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo Castle, Shane (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo waldo kitty (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo Castle, Shane (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo waldo kitty (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo Todd Wease (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo waldo kitty (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo Paul Schmehl (Nov 19)
- Re: can't remember why... snot prepends /etc/ to paths resulting in /etc//foo Castle, Shane (Nov 19)