[Snort-users] Buglet in config error handling

Jason Haar Jason.Haar at ...294...
Thu Mar 1 15:10:54 EST 2001


I've just download the "new improved" snortrules.tgz and attempted to run it
up with Snort 1.7-CVS built yesterday. It crashed on a bad config line.

I haven't tracked down the line, but the error message isn't helping me:

/usr/bin/snort.cvs -u snort -g snort -e -d -A full -i eth1 -c
/etc/snort/snort.conf -v

--== Initializing Snort ==--

Initializing Network Interface eth1
WARNING: OpenPcap() device eth1 network lookup: 
eth1: no IPv4 address assigned
Decoding Ethernet on interface eth1
Initializing Preprocessors!
Initializing Plug-ins!
Initializating Output Plugins!

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
[!] ERROR: Bad value in variable definition!
Make sure you don't have a "$" in the var name
Fatal Error, Quiting..


Could snort report the line on which such errors occurs? Would make tracking
down config errors a LOT easier.

Thanks

-- 
Cheers

Jason Haar

Unix/Special Projects, Trimble NZ
Phone: +64 3 9635 377 Fax: +64 3 9635 417




More information about the Snort-users mailing list