[Snort-users] Snort isn't starting at the Ubuntu:

Leon seclists at ...14165...
Sat Mar 29 17:13:09 EDT 2008


Hi

Looks like there are some problems with your snort.conf

> Mar 28 09:23:17 wilter-ubuntu snort[24673]: /etc/snort/ 
> snort.conf(214) unknown dynamic preprocessor "frag2"

frag2 has been replaced with frag3, You shouldn't have it enabled on  
line 214 of your snort.conf

As for the other errors, post your snort.conf with the full output of  
a snort -c /etc/snort/snort.conf -T and ill take a look.

-Leon


On 28 Mar 2008, at 17:45, jose wilter frazao wrote:

> Hello,
>
>  I do downloaded of  snort from www.snort.com and compiled the Snort  
> with support to Mysql, and I installed in the Ubuntu 7.04.
> When I insert the command "/usr/local/bin/snort -D -c /etc/snort/ 
> snort.conf" for start the daemon of the Snort show the massage in  
> the "/var/log/syslog":
>
> Mar 28 09:23:17 wilter-ubuntu snort[24673]: /etc/snort/ 
> snort.conf(214) unknown dynamic preprocessor "frag2"
> Mar 28 09:23:17 wilter-ubuntu snort[24673]: /etc/snort/ 
> snort.conf(360) unknown dynamic preprocessor "telnet_decode"
> Mar 28 09:23:17 wilter-ubuntu snort[24673]: /etc/snort/ 
> snort.conf(500) unknown dynamic preprocessor "xlink2state"
> Mar 28 09:23:17 wilter-ubuntu snort[24673]: FATAL ERROR:  
> Misconfigured dynamic preprocessor(s)
>
> What should I do to correct this problem?
>
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace_______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20080329/16c3fe5f/attachment.html>


More information about the Snort-users mailing list