[Snort-users] Error snort -c -T /etc/snort/snort.conf

Bennett Todd bet at ...6163...
Thu Feb 26 07:03:01 EST 2004


2004-02-26T01:53:30 M. Salman Farisi:
> root at ...274... /root# snort -T -c /etc/snort/snort.conf
> Running in IDS mode
> Log directory = /var/log/snort
> 
> Initializing Network Interface eth0
> ERROR: OpenPcap() FSM compilation failed:
>         parse error
> PCAP command: /etc/snort/snort.conf
> Fatal Error, Quitting..

What platform? What version of snort? Where did your snortrules come
from, when? What changes (if any) have you made to them?

I just ran that with snort 2.1.1, last night's download of
snortrules-snapshot-2_1.tar.gz, with RULE_PATH fixed up to
/etc/snort and a handful of sids (480, 527, 528, 1411, 1417, 1923,
and 2189) #-ed out, built on my bent linux distro, statically linked
against uClibc with cpw's libpcap-0.8.20040115.

Didn't reproduce your error.

-Bennett
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20040226/7aadfeb3/attachment.sig>


More information about the Snort-users mailing list