[Snort-users] [Snort-user] ERROR: ./../rules/app-detect.rules(0) Unable to open rules file "./../rules/app-detect.rules": No such file or directory.

zT zzahra88 at ...11827...
Thu Jan 22 15:44:30 EST 2015

this is my paths
var RULE_PATH ../rules
var SO_RULE_PATH ../so_rules
var PREPROC_RULE_PATH ../preproc_rules

but in  /etc/snort/rules there is no file!!!! rules folder is empty i
try to download rules from snort.org but i can not find rules file in
that site

On 1/23/15, Steve Gantz <stephen.gantz at ...16854...> wrote:
> Check your RULE_PATH declaration in the step #1 section of snort.conf. You
> can use an absolute path instead of a relative path if that is giving you
> trouble - most installation guides have the rules in /etc/snort/rules but
> you can put them elsewhere if you want. Just make sure the RULE_PATH
> variable accurately points to the right rules directory.
> Professor of Information Assurance
> The Graduate School
> University of Maryland University College
> stephen.gantz at ...16854...
>> On Jan 22, 2015, at 2:50 PM, zT <zzahra88 at ...11827...> wrote:
>> hello, when i run this command
>> sudo snort -T -c snort.conf
>> i got this error
>> ERROR: ./../rules/app-detect.rules(0) Unable to open rules file
>> "./../rules/app-detect.rules": No such file or directory.
>> what i can do?
>> ------------------------------------------------------------------------------
>> New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
>> GigeNET is offering a free month of service with a new server in Ashburn.
>> Choose from 2 high performing configs, both with 100TB of bandwidth.
>> Higher redundancy.Lower latency.Increased capacity.Completely compliant.
>> http://p.sf.net/sfu/gigenet
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>> Please visit http://blog.snort.org to stay current on all the latest Snort
>> news!

More information about the Snort-users mailing list