[Fwd: [Snort-users] Error: unable to open local.rules]
wucolin at ...2181...
Fri Jun 8 13:54:02 EDT 2001
Colin Wu wrote:
> It's running on an Ultra 10, Solaris 2.7 (or maybe 8, I'm not sure at the
> moment). The entire message was (after the usual time-stamp, host id, process
> id stuff) "ERROR: Unable to open rules file: local.rules"
> In answer to Aaron M: It doesn't seem to complain about any of the other rules
> and it doesn't crash everytime.
> Fyodor wrote:
> > On Fri, Jun 08, 2001 at 12:32:26PM -0400, Colin Wu wrote:
> > > I periodically HUP my snort (v1.7) to checkpoint the binary dump log,
> > > but occasionally snort will die with the message: " ERROR: Unable to
> > > open rules file: local.rules" in syslog. At this point I have to rename
> > > the local.rules file and make a new copy (mv local.rules local; cp local
> > > local.rules).
> > >
> > > Any ideas?
> > >
> > Hmm.. sounds strange. Which platform is that? Could you quote the whole
> > error message too (so we could see what errno's been set).
> > thanks
> > -F
> __ _ _ Network Analyst
> / ) // ' ) / Computing & Information Services
> / __|/ o ____ / / / . . McMaster University
> (__/ (_) \_<_/ / <_ (_(_/ (_/_ (905)525-9140 ext 24050
__ _ _ Network Analyst
/ ) // ' ) / Computing & Information Services
/ __|/ o ____ / / / . . McMaster University
(__/ (_) \_<_/ / <_ (_(_/ (_/_ (905)525-9140 ext 24050
More information about the Snort-users