[Snort-sigs] Re: include help

Erek Adams erek at ...95...
Sat Feb 15 07:59:03 EST 2003

On Fri, 14 Feb 2003, Belthrop, Tony wrote:

> Why is it that every time I try to add a sig that snort won't run? I
> crete the xxxx.rules file, and then edit the snort.conf file to add the
> # include $RULE_PATH/xxxx.rules....  I am missing a step here? The snort
> will not start on the sensors unless I go back and comment the new
> include line in the snort.conf file.

Because the # character is a "comment".  You'll need to add it to your
.conf as:

include $RULE_PATH/new.rules

Not as:

# include $RULE_PATH/new.rules

Then you'll need to restart Snort.

Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson

More information about the Snort-sigs mailing list