[Snort-users] New rule file format and lost path info

Fyodor fygrave at ...121...
Wed Mar 14 15:10:42 EST 2001


On Wed, Mar 14, 2001 at 01:22:32PM -0600, Steve Halligan wrote:
> Ok, maybe I didn't explain myself too well.
> Lets say my current dir is /home/stinky, lets say I a logged in as root.  I
> type
> snorty:/home/stinky# /usr/local/snort/snort -dev -c
> /usr/local/snort/snort.conf
> 
> snort barfs with:
> 
> ERROR: unable to open rules file: local.rules
> Fatal Error, quitting.
> 
> snort.conf has the the line:
> 
> include local.rules
> 
> snort is looking for the local.rules file in my current directory, not in
> the directory that snort.conf is in.  Now I could change snort.conf to read:
> include /usr/local/snort/local.rules
> 
> but shouldn't snort look for the included rules files in the path called out
> in the -c switch instead of looking just in the current dir and then dieing?
> 
> That a better explanation of it?


Got it. :) I just committed fixes to cvs, check it out and let us know if that's what you wanted :))





More information about the Snort-users mailing list