[Snort-users] Error: /etc/snort/snort.conf(291) => invalid stream tcp policy option

[Carter Waxman (cwaxman)]

The screenshot ends at line 290. Could you please show a little more of the conf?

Thanks
Carter

From: priyank shah <priyankshah902002 at ...11827...<mailto:priyankshah902002 at ...11827...>>
Date: Thursday, February 18, 2016 at 3:28 PM
To: "Vishnu Sriram (visriram)" <visriram at ...589...<mailto:visriram at ...16624....>>
Cc: "snort-users at lists.sourceforge.net<mailto:snort-users at ...5870....net>" <snort-users at lists.sourceforge.net<mailto:snort-users at ...2987...rge.net>>
Subject: Re: [Snort-users] Error: /etc/snort/snort.conf(291) => invalid stream tcp policy option

Hello Snort-users,

I am attaching a screenshot of the snort.conf file.

Thanks,
Pri

On Thu, Feb 18, 2016 at 10:58 AM, priyank shah <priyankshah902002 at ...14459.....<mailto:priyankshah902002 at ...11827...>> wrote:
Hello Snort-users,

I am attaching my config file.

Thank you
Pri

On Thu, Feb 18, 2016 at 10:52 AM, Vishnu Sriram (visriram) <visriram at ...16686......<mailto:visriram at ...589...>> wrote:
Hi,

         Can you please share your conf file? It seems there is a parsing error at line 291 in snort.conf.


Regards,
Vishnu.

[http://www.cisco.com/web/europe/images/email/signature/logo05.jpg]

Vishnu Sriram
ENGINEER.SOFTWARE ENGINEERING
visriram at ...589...<mailto:visriram at ...589...>
Phone:

Cisco Systems Limited




IN
Cisco.com<http://www.cisco.com>





[Think before you print.]Think before you print.

This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.
For corporate legal information go to:
http://www.cisco.com/web/about/doing_business/legal/cri/index.html



From: priyank shah [mailto:priyankshah902002 at ...11827...<mailto:priyankshah902002 at ...11827...>]
Sent: Thursday, February 18, 2016 4:14 PM
To: snort-users at lists.sourceforge.net<mailto:snort-users at ...3783...net>
Subject: [Snort-users] Error: /etc/snort/snort.conf(291) => invalid stream tcp policy option

Hello Snort-users,

I tried installing snort-2.9.8.0 on ubuntu 15.10 that I am running on Oracle VirtualBox. After the installation I tried running

sudo snort -T -i eth0 -c /etc/snort/snort.conf

to check the configuration.
But I got an error saying

Error: /etc/snort/snort.conf(291) => Invalid Stream TCP policy option
Fatal Error, Quitting..

Can anyone please help.

Thanks,
Pri


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20160222/c638afcd/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 5673 bytes
Desc: image001.jpg
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20160222/c638afcd/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.gif
Type: image/gif
Size: 134 bytes
Desc: image002.gif
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20160222/c638afcd/attachment.gif>