Re: [Snort-users] snort.lua broken thus pulledpork doesn't discover snort

[Joel Esler via Snort-devel <snort-devel () lists snort org>]

A guarantee if you google “snort error 422” the whole first page will be answers to this problem.   I’ve answered this 
personally, probably a hundred times over the past 8 years.  

— 
Sent from my  iPhone

> On Jun 26, 2022, at 13:53, Dorian ROSSE <dorianbrice () hotmail fr> wrote:
>
> 
> now pulledpork has a new error : it is error 422 !
>
> snort has loosen all brain : all line of command launch for snort answere nothing !
>
> what i need to do ?
>
> thanks you in advance for your help,
>
> regards.
>
>
> dorian rosse.
> De : Dorian ROSSE <dorianbrice () hotmail fr>
> Envoyé : dimanche 26 juin 2022 18:03
> À : Joel Esler <joel.esler () me com>
> Cc : snort-users () lists snort org <snort-users () lists snort org>; snort-devel () lists snort org <snort-devel () 
> lists snort org>
> Objet : Re: [Snort-users] snort.lua broken thus pulledpork doesn't discover snort
>  
> Joel,
>
>
> I have ever tried to repair without success thus I wait a real help instead of just an answer without help,
>
> The snort.lua is the previous ever working before I install a new time the laptop I think there are some problems by 
> the system for understand the some programs between itself,
>
> Thanks you in advance to really help myself,
>
> Regards.
>
>
> Dorian Rosse.
> From: Joel Esler <joel.esler () me com>
> Sent: Sunday, June 26, 2022 2:28:00 PM
> To: Dorian ROSSE <dorianbrice () hotmail fr>
> Cc: snort-users () lists snort org <snort-users () lists snort org>; snort-devel () lists snort org <snort-devel () 
> lists snort org>
> Subject: Re: [Snort-users] snort.lua broken thus pulledpork doesn't discover snort
>  
> You have two different problems. I suggest you read your error messages. 
>
> — 
> Sent from my  iPhone
>
> > > On Jun 24, 2022, at 17:35, Dorian ROSSE via Snort-users <snort-users () lists snort org> wrote:
> > 
> > hello,
> >
> >
> > snort.lua broken thus pulledpork doesn't discover snort : 
> > ~/snort_src/pulledpork-master$ sudo /usr/local/bin/pulledpork.pl -c /usr/local/etc/pulledpork/pulledpork.conf -l -P 
> > -E -T
> >
> >     https://github.com/shirkdog/pulledpork
> >       _____ ____
> >      `----,\    )
> >       `--==\\  /    PulledPork v0.8.0 - The only positive thing to come out of 2020...well this and take-out liquor!
> >        `--==\\/
> >      .-~~~~-.Y|\\_  Copyright (C) 2009-2021 JJ Cummings, Michael Shirk
> >   @_/        /  66\_  and the PulledPork Team!
> >     |    \   \   _(")
> >      \   /-| ||'--'  Rules give me wings!
> >       \_\  \_\\
> >  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> >
> > Use of uninitialized value $Value in pattern match (m//) at /usr/local/bin/pulledpork.pl line 167, <CONFIG> line 20.
> > readline() on closed filehandle FH at /usr/local/bin/pulledpork.pl line 1647.
> > Use of uninitialized value $Snort in ord at /usr/local/bin/pulledpork.pl line 1924.
> > You need to define an oinkcode, please review the rule_url section of the pulledpork config file!
> >  at /usr/local/bin/pulledpork.pl line 2121.
> > '''
> >
> > '''sudo /usr/local/bin/snort -V
> > sudo: /usr/local/bin/snort : commande introuvable'''
> >
> > '''snort -c /usr/local/etc/snort/snort.lua
> > Running in IDS mode
> >
> >         --== Initializing Snort ==--
> > Initializing Output Plugins!
> > Initializing Preprocessors!
> > Initializing Plug-ins!
> > Parsing Rules file "/usr/local/etc/snort/snort.lua"
> > ERROR: /usr/local/etc/snort/snort.lua(1) Invalid configuration line: 
> > ---------------------------------------------------------------------------
> >
> > Fatal Error, Quitting..
> > '''
> >
> > thanks you in advance to help myself fully install snort and pulledpork for sanitize my network,
> >
> > regards.
> >
> >
> > dorian rosse.
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists snort org
> > Go to this URL to change user options or unsubscribe:
> > https://lists.snort.org/mailman/listinfo/snort-users
> >
> >    To unsubscribe, send an email to:
> >    snort-users-leave () lists snort org
> >
> > Please visit http://blog.snort.org to stay current on all the latest Snort news!
> >
> > Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!