[Snort-users] Rules just don't show up in SNortcenter
djclark at ...9215...
Tue May 20 04:28:08 EDT 2003
I had the same problem, the answer for me was:-
The snort.2.0.0.tar.gz file has a strange ruleset, each of the files
eg. ftp.rules, is missing a hashed out section called # $Id: .
whereas if you download the latest ruleset then the $Id has returned
and snortcenter loads & parses the rules fine.
Maybe this isn't quite the same problem, but hope this helps.
----- Original Message -----
From: "Matthew McCarty" <matthew at ...6365...>
To: <snort-users at lists.sourceforge.net>
Sent: Tuesday, May 20, 2003 1:42 AM
Subject: [Snort-users] Rules just don't show up in SNortcenter
> I installed Snort, ACID, and Snort center according to this guys
> The only difference is that my system is Redhat 8.0 and not 9.0
> When I go to update rules from the Internet it says there are no updates
> available. Of course this does not make sense because when I go to view
> the rules no rules even show up.
> I have manually unpackaged the current rules into etc/snort/rules and
> have tried both the /etc/snort and etc/snort/rules line in the config
> file for the sensors located in /etc/snort -- they still do not show up
> in the Snort Console. I have looked at all the variables in the
> /var/html/www/snortcenter configuration file and am at a loss as to how
> to force the recognition of the signatures.
> Does anybody have any ideas?
> Matthew McCarty <matthew at ...6365...>
> This SF.net email is sponsored by: If flattening out C++ or Java
> code to make your application fit in a relational database is painful,
> don't do it! Check out ObjectStore. Now part of Progress Software.
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users