[Snort-users] Snort error: Unterminated IP List and clamav problems

carlopmart carlopmart at ...11827...
Fri Sep 21 16:04:08 EDT 2007


Hi all,

  I have installed an ids sensor with snort 2.6.1.5. When I try to 
startup returns me this error:

snort[16936]: FATAL ERROR: /etc/snort_ids-lan/bleeding-dshield.rules(32) 
=> Unterminated IP List

  If I disbled all rules, this error doesn't appears .. but i need to 
disable all rules ....

What does it means??

I have compiled snort with this options:

--enable-stream4udp --enable-dynamicplugin --prefix=/usr/local 
--with-mysql --enable-clamav --with-dnet-includes=/usr/local/include 
--with-dnet-libraries=/usr/local/lib

  And another error displayed is referred to clamav:

  LibClamAV Error: Cannot create file 
/tmp/clamav-8dd09f7dffc45dd0a8d680e06f3ee34c/COPYING.
LibClamAV Error: cli_cvdload(): Can't unpack CVD file.
LibClamAV Error: Can't load /var/lib/clamav/main.cvd: CVD extraction failure

  I have searching via google, and all posts that I find talks about 
space problems on /tmp directory, but my /tmp directory is 5% of 512 MB 
occuped. How can I fix this??

Many thanks.
-- 
CL Martinez
carlopmart {at} gmail {d0t} com




More information about the Snort-users mailing list