Snort mailing list archives
Re: FW: AW: Libovar Man info.
From: waldo kitty <wkitty42 () windstream net>
Date: Thu, 10 Apr 2014 14:49:42 -0400
On 4/10/2014 2:31 PM, Rameez Qureshi wrote:
I don't think I got the second email, I got the one where you replied and suggested me starting from scratch
that is the one i'm speaking of... here's a manual quote of it ;) [quote] On 4/9/2014 6:19 PM, Rameez Qureshi wrote:
for my snort.conf file when taking out the # out of the rule paths for rules and for including individual rules it throws up and error and this led me to taking out the # where snort seemed to fire correctly but did not load any rules
sorry! i hit the wrong keys with my previous reply :( line 538 in your snort.conf doesn't contain a filename... line 540 is missing the '/' between "rules" and "file"... line 692 is missing the 'i' in "include"... you have so many other items commented out that it is doubtful that you will get it working without a lot of editing... you might want to start with a fresh snort.conf and then make the few edits needed for your installation while leaving everything else as is... [/quote]
which is what I have done now as ended up with the following:
yes i saw that... my first question is why is it looking in a 'src' directory? there should be no need to add paths to those include lines... generally speaking, those two files (classification.conf and reference.conf) should reside in the same directory as your snort.conf (/etc/)... -- NOTE: No off-list assistance is given without prior approval. Please keep mailing list traffic on the list unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Put Bad Developers to Shame Dominate Development with Jenkins Continuous Integration Continuously Automate Build, Test & Deployment Start a new project now. Try Jenkins in the cloud. http://p.sf.net/sfu/13600_Cloudbees _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Re: FW: AW: Libovar Man info., (continued)
- Re: FW: AW: Libovar Man info. Rameez Qureshi (Apr 09)
- Re: FW: AW: Libovar Man info. waldo kitty (Apr 09)
- Re: FW: AW: Libovar Man info. Rameez Qureshi (Apr 09)
- Re: FW: AW: Libovar Man info. waldo kitty (Apr 09)
- Re: FW: AW: Libovar Man info. Rameez Qureshi (Apr 09)
- Re: FW: AW: Libovar Man info. Y M (Apr 09)
- Re: FW: AW: Libovar Man info. Rameez Qureshi (Apr 10)
- Re: FW: AW: Libovar Man info. Rameez Qureshi (Apr 10)
- Re: FW: AW: Libovar Man info. Rameez Qureshi (Apr 09)
- Re: FW: AW: Libovar Man info. waldo kitty (Apr 10)
- Re: FW: AW: Libovar Man info. Rameez Qureshi (Apr 10)
- Re: FW: AW: Libovar Man info. waldo kitty (Apr 10)
- Re: FW: AW: Libovar Man info. Rameez Qureshi (Apr 10)
- Re: FW: AW: Libovar Man info. waldo kitty (Apr 09)
- Re: FW: AW: Libovar Man info. Rameez Qureshi (Apr 10)
- Re: FW: AW: Libovar Man info. Rameez Qureshi (Apr 10)