[Snort-users] Rules just don't show up in SNortcenter

Daniel Clark djclark at ...9215...
Tue May 20 04:28:08 EDT 2003


Hi Matthew, 
I had the same problem, the answer for me was:-

    The snort.2.0.0.tar.gz file has a strange ruleset, each of the files
    eg. ftp.rules, is missing a hashed out section called # $Id: .
    whereas if you download the latest ruleset then the $Id has returned
    and snortcenter loads & parses the rules fine.

Maybe this isn't quite the same problem, but hope this helps.

Daniel Clark,

----- Original Message ----- 
From: "Matthew McCarty" <matthew at ...6365...>
To: <snort-users at lists.sourceforge.net>
Sent: Tuesday, May 20, 2003 1:42 AM
Subject: [Snort-users] Rules just don't show up in SNortcenter


> I installed Snort, ACID, and Snort center according to this guys
> documentation:
> 
> www.superhac.com
> 
> The only difference is that my system is Redhat 8.0 and not 9.0
> 
> When I go to update rules from the Internet it says there are no updates
> available.  Of course this does not make sense because when I go to view
> the rules no rules even show up.
> 
> I have manually unpackaged the current rules into etc/snort/rules and
> have tried both the /etc/snort and etc/snort/rules line in the config
> file for the sensors located in /etc/snort -- they still do not show up
> in the Snort Console. I have looked at all the variables in the
> /var/html/www/snortcenter configuration file and am at a loss as to how
> to force the recognition of the signatures.
> 
> Does anybody have any ideas?
> 
> 
> 
> -- 
> Matthew McCarty <matthew at ...6365...>
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: If flattening out C++ or Java
> code to make your application fit in a relational database is painful, 
> don't do it! Check out ObjectStore. Now part of Progress Software.
> http://www.objectstore.net/sourceforge
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 




More information about the Snort-users mailing list