[Snort-users] FATAL ERROR: /usr/local/etc/snort.conf(45) Unknown rule type: ipvar.

alexus alexus at ...11827...
Mon Aug 15 17:15:01 EDT 2011


I'm trying to run snort-2.9.0.5 and in my logs I'm getting following messages:

Aug 15 21:10:07 dd snort[71312]: Running in IDS mode
Aug 15 21:10:07 dd snort[71312]:
Aug 15 21:10:07 dd snort[71312]:         --== Initializing Snort ==--
Aug 15 21:10:07 dd snort[71312]: Initializing Output Plugins!
Aug 15 21:10:07 dd snort[71312]: Initializing Preprocessors!
Aug 15 21:10:07 dd snort[71312]: Initializing Plug-ins!
Aug 15 21:10:07 dd snort[71312]: Parsing Rules file "/usr/local/etc/snort.conf"
Aug 15 21:10:07 dd snort[71312]: FATAL ERROR:
/usr/local/etc/snort.conf(45) Unknown rule type: ipvar.

line 45 of /usr/local/etc/snort.conf states:

ipvar HOME_NET [64.237.55.65/27]

I dont understand why it's complaining ...

-- 
http://alexus.org/




More information about the Snort-users mailing list