[Snort-users] FW: AW: Libovar Man info.

Rameez Qureshi rameez_q at ...16117...
Thu Apr 10 14:31:05 EDT 2014


I don't think I got the second email, I got the one where you replied and suggested me starting from scratch which is what I have done now as ended up with the following:




> I have commented out the # for the white & black list rules to run through the config document to see any other errors and have another error as follows:
> 
> ERROR: ../rules/blacklist.rules(22) Unknown ClassType: trojan-activity
> Fatal Error, Quitting..
> 
> I have seen it relates to the classification and reference.config files which are in the config file as follows: include classification.config
> include reference.config
> 
> When i add rule paths to them I get the following error:
> 
> ERROR: ./../rules/usr/src/reference.config(0) Unable to open rules file "./../rules/usr/src/reference.config": No such file or directory.
> 
> Fatal Error, Quitting..

Sent from my iPhone

On 10 Apr 2014, at 07:23 PM, "waldo kitty" <wkitty42 at ...14940...> wrote:

> On 4/9/2014 8:59 PM, Rameez Qureshi wrote:
> [...]
>> ERROR: snort.conf(540) Undefined variable name: RULE_PATH.
>> Fatal Error, Quitting..
>> 
>> When i add in # before the rule path in line 540 of the snort.conf then it does
>> not throw up any error but it reads 0 rules when initializing as follows:
> 
> yeah, you did get my second post, right? that one of mine was sent in error... 
> essentially, don't comment out lines that are shown as errors... you should fix 
> them, instead ;)
> 
> my second response gave you the fixes needed for the three lines in error O:)
> 
> -- 
> NOTE: No off-list assistance is given without prior approval.
>       Please keep mailing list traffic on the list unless
>       private contact is specifically requested and granted.
> 
> ------------------------------------------------------------------------------
> Put Bad Developers to Shame
> Dominate Development with Jenkins Continuous Integration
> Continuously Automate Build, Test & Deployment 
> Start a new project now. Try Jenkins in the cloud.
> http://p.sf.net/sfu/13600_Cloudbees
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!




More information about the Snort-users mailing list