Re: Error while starting Snort 3

["Mike Stepanek \(mstepane\) via Snort-users" <snort-users () lists snort org>]

It seems to be complaining about your appMapping.data in your ODP (with what looks to be an odd line in it). Which ODP 
are you using? Did you modify it at all? Anything odd looking in it (each line should basically look the same with a 
comma-separated list of strings and numbers)? Anything odd about how you configured it? I don't suppose we can get the 
file...

 - Mike Stepanek
   mstepane () cisco com


On 7/18/18, 7:41 AM, "Snort-users on behalf of Ľubomír Bielik via Snort-users" <snort-users-bounces () lists snort org 
on behalf of snort-users () lists snort org> wrote:

    Hi all,
    
    I am trying to install snort 3 on VM with centos 7.5 with this guide,
    however I fail to run snort against an interface like shown in the
    end.
    Guide:
    https://www.snort.org/documents/snort-3-on-centos-7
    
    While initialising search engine, i get fatal error and snort quits. I
    found nothing about this specific error.
    
    Error:
    --------------------------------------------------
    search engine
                    instances: 791
                     patterns: 81091
                pattern chars: 1416781
                   num states: 1081210
             num match states: 81083
                 memory scale: MB
                 total memory: 28.5913
               pattern memory: 4.44377
            match list memory: 10.981
            transition memory: 13.0699
    Could not read app_name. Line Snort Differs AppKey vmware-remote-auth
    -> vmware-remote-a
    --------------------------------------------------
    pcap DAQ configured to passive.
    FATAL: see prior 1 errors (0 warnings)
    Fatal Error, Quitting..
    
    
    Any help please?
    _______________________________________________
    Snort-users mailing list
    Snort-users () lists snort org
    Go to this URL to change user options or unsubscribe:
    https://lists.snort.org/mailman/listinfo/snort-users
    
        To unsubscribe, send an email to:
        snort-users-leave () lists snort org
    
    Please visit http://blog.snort.org to stay current on all the latest Snort news!
    
    Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
    

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette