[Fwd: [Snort-users] Error: unable to open local.rules]

Colin Wu wucolin at ...2181...
Fri Jun 8 13:54:02 EDT 2001


Colin Wu wrote:

> It's running on an Ultra 10, Solaris 2.7 (or maybe 8, I'm not sure at the
> moment).  The entire message was (after the usual time-stamp, host id, process
> id stuff) "ERROR: Unable to open rules file: local.rules"
>
> In answer to Aaron M: It doesn't seem to complain about any of the other rules
> and it doesn't crash everytime.
>
> Fyodor wrote:
>
> > On Fri, Jun 08, 2001 at 12:32:26PM -0400, Colin Wu wrote:
> > > I periodically HUP my snort (v1.7) to checkpoint the binary dump log,
> > > but occasionally snort will die with the message: " ERROR: Unable to
> > > open rules file: local.rules" in syslog.  At this point I have to rename
> > > the local.rules file and make a new copy (mv local.rules local; cp local
> > > local.rules).
> > >
> > > Any ideas?
> > >
> >
> > Hmm.. sounds strange. Which platform is that?  Could you quote the whole
> > error message too (so we could see what errno's been set).
> >
> > thanks
> > -F
>
> --
>
>    __     _             _            Network Analyst
>   /  )   //            ' )   /       Computing & Information Services
>  /    __|/  o ____      / / / . .    McMaster University
> (__/ (_) \_<_/ / <_    (_(_/ (_/_    (905)525-9140 ext 24050
>                                      http://netman.McMaster.CA

--

   __     _             _            Network Analyst
  /  )   //            ' )   /       Computing & Information Services
 /    __|/  o ____      / / / . .    McMaster University
(__/ (_) \_<_/ / <_    (_(_/ (_/_    (905)525-9140 ext 24050
                                     http://netman.McMaster.CA






More information about the Snort-users mailing list