[Snort-users] FATAL ERROR: /usr/local/etc/snort.conf(45) Unknown rule type: ipvar.

Russ Combs rcombs at ...1935...
Mon Aug 15 17:42:10 EDT 2011


Make sure you ./configure with --enable-ipv6.

On Mon, Aug 15, 2011 at 5:15 PM, alexus <alexus at ...11827...> wrote:

> I'm trying to run snort-2.9.0.5 and in my logs I'm getting following
> messages:
>
> Aug 15 21:10:07 dd snort[71312]: Running in IDS mode
> Aug 15 21:10:07 dd snort[71312]:
> Aug 15 21:10:07 dd snort[71312]:         --== Initializing Snort ==--
> Aug 15 21:10:07 dd snort[71312]: Initializing Output Plugins!
> Aug 15 21:10:07 dd snort[71312]: Initializing Preprocessors!
> Aug 15 21:10:07 dd snort[71312]: Initializing Plug-ins!
> Aug 15 21:10:07 dd snort[71312]: Parsing Rules file
> "/usr/local/etc/snort.conf"
> Aug 15 21:10:07 dd snort[71312]: FATAL ERROR:
> /usr/local/etc/snort.conf(45) Unknown rule type: ipvar.
>
> line 45 of /usr/local/etc/snort.conf states:
>
> ipvar HOME_NET [64.237.55.65/27]
>
> I dont understand why it's complaining ...
>
> --
> http://alexus.org/
>
>
> ------------------------------------------------------------------------------
> uberSVN's rich system and user administration capabilities and model
> configuration take the hassle out of deploying and managing Subversion and
> the tools developers use with it. Learn more about uberSVN and get a free
> download at:  http://p.sf.net/sfu/wandisco-dev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please see http://www.snort.org/docs for documentation
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20110815/00f97328/attachment.html>


More information about the Snort-users mailing list