[Snort-users] issue of installing Snort_2.8.4.1 and Barnyard2 in Ubunto 9.10

Jun Wan junwei_wan at ...125...
Wed Mar 3 18:27:29 EST 2010


I am new to Snort, I followed the instructions on this url:  https://wwwx.cs.unc.edu/~hays/archives/work/index.php

All went well until I reached the following stage:

  "Now a quick test. Run the following and see if snort runs:

sudo snort -c /etc/snort/snort.conf -i eth1"

After running the command line above, I got the following outcomes:

Running in IDS mode

        --== Initializing Snort ==--
Initializing Output Plugins!
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /etc/snort/snort.conf
Var 'HOME_NET' redefined
PortVar 'HTTP_PORTS' defined :  [ 80 ]
PortVar 'SHELLCODE_PORTS' defined :  [ 0:79 81:65535 ]
PortVar 'ORACLE_PORTS' defined :  [ 1521 ]
Frag3 global config:

Initializing rule chains...
ERROR: Undefined variable name: (/etc/snort/rules/bad-traffic.rules:27): EXTERNAL_NET
Fatal Error, Quitting..

Is there anyone know what's this all about? Would you please let me know "how to" fix this "Fatal Error"?  what should I do next?

Any information and help would be much appreciated.



Browse profiles for FREE! Meet local singles online.

More information about the Snort-users mailing list