[Snort-users] ssn_file location

Gregory Zill gregory at ...14510...
Thu Aug 19 16:45:07 EDT 2010

The README.sensitive_data does not specify where to place the ssn_file
or if perhaps it needs a path. I have made sure I have file owned by
snort user, but I still get following error when enabling the ssn_file

FATAL ERROR: Error parsing Social Security group data from file:

/etc/snort/snort.conf section
# Sensitive Data Preprocessor
preprocessor sensitive_data: alert_threshold 25 \
                mask_output \
                ssn_file ssn_groups_Aug10.csv

file location:
The whole purpose of places like Starbucks is for people with no
decision-making ability whatsoever to make six decisions just to buy
one cup of coffee. Short, tall, light, dark, caf, decaf, low-fat,
non-fat, etc. So people who don't know what the hell they're doing or
who on earth they are can, for only $2.95, get not just a cup of
coffee but an absolutely defining sense of self: Tall! Decaf!
Cappuccino!             ~Joe (Tom Hanks) in You've Got Mail

Gregory W Zill, MBA, CISSP

More information about the Snort-users mailing list