[Snort-users] snort local.rules help

John Sage jsage at ...2022...
Mon Oct 1 08:17:05 EDT 2001


Brent:

Try commenting the offending line in snort.conf out, thusly:

# include local.rules


- John

-- 
John Sage
FinchHaven, Vashon Island, WA, USA
http://www.finchhaven.com/
mailto:jsage at ...2022...
"The web is so, like, five minutes ago..."


Brent wrote:

> Im trying to run snort on my FBSD 4.3 box ...when i start it doing:
> 
> /usr/local/bin/snort -d -h 192.168.0.0/24 -l /var/log/snort.log -c 
> /usr/local/etc/snort.conf &     
> 
>   from /etc/rc.conf
> 
> i get it cant initialize because it cant find local.rules.... however 
> the local.rules is in the the default directory for snort
> 
> but its empty
> 
> there is A  local.rules.sample    but im not sure how to apply it to my 
> situation..
> 
> any help is greatly appreciated
> 
> Brent
> 






More information about the Snort-users mailing list