[Snort-users] [Snort-user] ERROR: ./../rules/app-detect.rules(0) Unable to open rules file "./../rules/app-detect.rules": No such file or directory.

Steve Gantz stephen.gantz at ...16854...
Thu Jan 22 15:32:59 EST 2015


Check your RULE_PATH declaration in the step #1 section of snort.conf. You can use an absolute path instead of a relative path if that is giving you trouble - most installation guides have the rules in /etc/snort/rules but you can put them elsewhere if you want. Just make sure the RULE_PATH variable accurately points to the right rules directory. 

Dr. Stephen D. Gantz, CISSP-ISSAP, CEH, CGEIT, CRISC, CIPP/G, C|CISO

Professor of Information Assurance

The Graduate School

University of Maryland University College

stephen.gantz at ...16854...



> On Jan 22, 2015, at 2:50 PM, zT <zzahra88 at ...11827...> wrote:
> 
> hello, when i run this command
> sudo snort -T -c snort.conf
> i got this error
> ERROR: ./../rules/app-detect.rules(0) Unable to open rules file
> "./../rules/app-detect.rules": No such file or directory.
> what i can do?
> 
> ------------------------------------------------------------------------------
> New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
> GigeNET is offering a free month of service with a new server in Ashburn.
> Choose from 2 high performing configs, both with 100TB of bandwidth.
> Higher redundancy.Lower latency.Increased capacity.Completely compliant.
> http://p.sf.net/sfu/gigenet
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150122/06b669c2/attachment.html>


More information about the Snort-users mailing list