[Snort-users] Fatal Error, Quitting..

dlimanov at ...11654... dlimanov at ...11654...
Mon Apr 26 14:11:04 EDT 2004

That line correctly points to /etc/snort/rules..


"Harper, Patrick" <patrick.harper at ...11593...> 
04/26/2004 04:56 PM

<dlimanov at ...11654...>, <snort-users at lists.sourceforge.net>

RE: [Snort-users] Fatal Error, Quitting..

look in your snort.conf for the RULE_PATH
var RULE_PATH /etc/snort/rules
Patrick S. Harper | CISSP RHCT MCSE
Information Security Engineer
patrick.harper at ...11593...


From: dlimanov at ...11654... [mailto:dlimanov at ...11654...] 
Sent: Monday, April 26, 2004 2:22 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Fatal Error, Quitting..

For some reason my snort install is blowing up loading rules file with the 
following error: 
"ERROR: Unable to open rules file: local.rules or /etc/snort/local.rules 
Fatal Error, Quitting.."
The problem here that it's trying to load the rules from /etc/snort/ and 
it's not there, since rules are located in /etc/snort/rules/ directory. I 
have checked my snort.conf file and for the life of me cannot see where 
it's getting /etc/snort/ from! 
Is there any other place where snort will get it's configuration, even 
when I run like this: snort -c /etc/snort/snort.conf ? Is there some other 
config location that I'm missing? 


This electronic message, including any attachments, is confidential and 
intended solely for use of the intended recipient(s). This message may 
contain information that is privileged or otherwise protected from 
disclosure by applicable law. Any unauthorized disclosure, dissemination, 
use or reproduction is strictly prohibited. If you have received this 
message in error, please delete it and notify the sender immediately. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20040426/8e44c767/attachment.html>

More information about the Snort-users mailing list