[Snort-users] config profile_rules

Jefferson, Shawn Shawn.Jefferson at ...14448...
Fri Jun 4 12:56:49 EDT 2010


What does --enable-sourcefire do?

________________________________
From: Joel Esler [mailto:jesler at ...1935...]
Sent: Friday, June 04, 2010 9:12 AM
To: Pedro Marinho
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] config profile_rules

You need to compile performance monitoring in.

These are my compile tags:

--enable-sourcefire --enable-reload --enable-targetbased --enable-zlib --enable-ipv6 --enable-gre --enable-mpls --enable-pp
m --enable-perfprofiling


On Jun 4, 2010, at 12:01 PM, Pedro Marinho wrote:


Hello Joel,

I am disabling some rules here to improve performance. I was reading at your blog

http://blog.joelesler.net/2010/04/fun-with-profile_rules.html

so i put that config option on the snort.conf
like this:

config profile_rules

but i am receiving an error when i up snort

snort -q -c /etc/snort/snort.conf -i eth2 -A console -N

this error

ERROR: Unknown config directive: config profile_rules
Fatal Error, Quitting..

do u know what am i doing wrong?


--
Joel Esler
302-223-5974
Jabber: jesler at ...1935...<mailto:jesler at ...1935...>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100604/6838385f/attachment.html>


More information about the Snort-users mailing list