[Snort-users] FATAL ERROR: /usr/local/etc/snort.conf(45) Unknown rule type: ipvar.

waldo kitty wkitty42 at ...14940...
Mon Aug 15 17:40:24 EDT 2011

On 8/15/2011 17:15, alexus wrote:
> line 45 of /usr/local/etc/snort.conf states:
> ipvar HOME_NET []
> I dont understand why it's complaining ...

IIRC, ipvar is for IPv6 stuff... if you do not have IPv6 enabled in your snort 
compile, it won't work... use var instead of ipvar...

More information about the Snort-users mailing list