[Snort-users] Snort startup error

Kevin.Brown at ...1022... Kevin.Brown at ...1022...
Wed Mar 21 16:48:43 EST 2001


Leave off the quotes in var HOME_NET?

> Initializing rule chains...
> Kernel filter, protocol ALL, raw packet socket
> ERROR /etc/snort/snort.conf (7) => Rule IP addr ("192.168.25.99") didn't
> x-late, WTF?
> 
> 
> This what my configfile looks like:
> 
> var HOME_NET "192.168.25.99"/32
> var EXTERNAL_NET any
> var DNS_SERVERS [192.168.25.3/32,194.109.6.66/32,10.11.202.26/32]
> 
> preprocessor defrag
> preprocessor http_decode: 80 8080
> preprocessor portscan: $HOME_NET 4 3 /var/log/snort/portscan.log
> preprocessor portscan-ignorehosts: $DNS_SERVERS
> 
> -- snip ---
> 
> Can someone explain to me why I get that error, I tryed to change
> "192.168.25.99"/32 into "192.168.25.99/32" but it doesnt work.
> 
> With regards,
> 
> Rens
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 





More information about the Snort-users mailing list