[Snort-users] error message

Swapnil Shinde swapnil34 at ...11827...
Sun Jun 3 09:06:51 EDT 2012


Set Home and Rules_path variables to /etc/snort and /rules respectively.

Now test it with snort -T -c /etc/snort/snort.conf.  If it returns success then run with snort -c /etc/snort/snort.conf.

Also make sure that there are right permissions set for /etc/snort directory.

Swapnil
Sent from my iPhone

On Jun 3, 2012, at 2:19 AM, Giuseppe Triolo <fastfouriertransform at ...125...> wrote:

> Hi all i have reinstalled snort 6 times.
> here is attached  a file in testsnort.txt in .txt format my latest problem!
> the error message i receive from terminal is:
>  ERROR: Unable to open rules file "/etc/snort//etc/snort/rules/etc/snort/rules/local.rules": No such file or directory.
> I cannot understand why?
> In the snort.conf file i have setted up correctly the path where local.rules is.
> i have 3 snort.conf files in my system 1 is in /etc/snort the 2nd is in  /usr/src/snorttemp/etc the 3rth is in/usr/src/snorttemp/snort-2.9.2.3/etc.
> I have edited only the snort.conf  that is inside /etc/snort
> the command snort -v works well i have done the database schemas and all other things corrctly.
> how can i change snort to point in a directory different from /etc/snort//etc/snort/rules/etc/snort/rules/
> i wish snort points in /etc/snort/rules   HERE is where resides the file local.rules instead of 
> /etc/snort//etc/snort/rules/etc/snort/rules/ where snort points now .
> Please help i have to do an exam with snort.
> 
> <testsnort.txt>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and 
> threat landscape has changed and how IT managers can respond. Discussions 
> will include endpoint security, mobile security and the latest in malware 
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120603/292d02d9/attachment.html>


More information about the Snort-users mailing list