[Snort-users] Snort 3 Beta 3 -- sspiffy.sh init_src() function

Russ Combs rcombs at ...1935...
Mon Apr 6 15:35:33 EDT 2009


Thanks for reporting this issue.  To fix with the attached patch:

cd src/analysis/snort
patch -p0 < sspiffy.patch

Russ

On Sat, Apr 4, 2009 at 9:43 PM, Burks, Doug <doug.burks at ...14446...> wrote:

> sspbeta at ...1935...,
>
> There seems to be a bug in the new sspiffy.sh script that wasn't there in
> Beta 2.
>
> I ran the following command:
> sspiffy.sh /usr/local -c snort_orig.conf -i eth0
>
> The script properly created snort.lua and snort.conf.  However, when
> running snortsp with the resulting snort.lua, it tries to read a *file*
> called "eth0".  I opened snort.lua and found the following in the init_src
> function:
> type="file", snaplen=1514
>
> I changed this line to:
> type="pcap", snaplen=1514
>
> and everything works fine.
>
> Thanks,
> Doug Burks
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20090406/f895bf22/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sspiffy.patch
Type: text/x-patch
Size: 889 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20090406/f895bf22/attachment.bin>


More information about the Snort-users mailing list