[Snort-users] help

Telfort P telfortps at gmail.com
Sat May 18 15:10:52 EDT 2019


i did, it didn't work

On 5/17/19 1:13 AM, Dorian ROSSE wrote:
> For snort as a deamon follow this link :
>
> http://
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>manual
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>-
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>snort
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>-org.s3-website-us-
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>east
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>-1.amazonaws.com/
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>node11
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>.
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>html
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>#SECTION00291000000000000000
> <http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html#SECTION00291000000000000000>
>
> I Hope It will help you,
>
> Regards.
>
>
> Dorian Rosse.
>
> Télécharger Outlook pour Android <https://aka.ms/ghei36>
>
> ------------------------------------------------------------------------
> *From:* Snort-users <snort-users-bounces at lists.snort.org> on behalf of
> pierre telfort via Snort-users <snort-users at lists.snort.org>
> *Sent:* Thursday, May 16, 2019 1:08:10 AM
> *To:* wkitty42 at windstream.net
> *Cc:* snort-users at lists.snort.org
> *Subject:* Re: [Snort-users] help
>  
> i fixed this thanks. now I'm trying to start snort as daemon service.
> i found some examples on how to do it. i followed those examples and
> tried to start the snort.service, i got an error message.
>
> Le lun. 13 mai 2019 à 09:40, wkitty42--- via Snort-users
> <snort-users at lists.snort.org <mailto:snort-users at lists.snort.org>> a
> écrit :
>
>
>
>     please keep snort issues on the snort mailing list and do not take
>     them private
>     unless specifically requested... this way others with the same or
>     similar
>     problem can find the solution, too... i've added the list back to
>     my reply...
>
>
>     the problem is that you have spaces in all of those *_PATH lines
>     you posted for
>     my query...
>
>     #104 var RULE_PATH ../rules /etc/snort/rules
>     here ----------------------^
>
>     either remove those spaces or fix those paths to point to the
>     proper directories
>     for all of those *_PATH lines on lines 104, 105, 106, 113, and
>     114... check any
>     other paths, too...
>
>     perhaps you meant to have the following instead of the default
>     "../rules"??
>
>     #104 var RULE_PATH /etc/snort/rules
>
>
>
>     On 5/7/19 9:36 PM, Telfort P wrote:
>     > #100
>     > # 101 Path to your rules files (this can be a relative path)
>     > # 102 Note for Windows users:  You are advised to make this an
>     absolute path,
>     > # 103 such as:  c:\snort\rules
>     > #104 var RULE_PATH ../rules /etc/snort/rules
>     > #105 var SO_RULE_PATH ../so_rules /etc/snort/so_rules
>     > #106 var PREPROC_RULE_PATH ../preproc_rules etc/snort/preproc_rules
>     > #107 #108 If you are using reputation preprocessor set these
>     > #109 Currently there is a bug with relative paths, they are
>     relative to where
>     > snort is
>     > #110 not relative to snort.conf like the above variables
>     > #111 This is completely inconsistent with how other vars work,
>     BUG 89986
>     > #112 Set the absolute path appropriately
>     > #113 var WHITE_LIST_PATH ../rules /etc/snort/rules
>     > #114 var BLACK_LIST_PATH ../rules /etc/snort/rules
>     > #115
>     >
>     >
>     > *I labeled them the same way it is in my config file.*
>     >
>     > On 5/7/19 3:04 AM, wkitty42--- via Snort-users wrote:
>     >> On 5/3/19 10:04 PM, Telfort P via Snort-users wrote:
>     >>> How do i fix this error in my rules. ""ERROR:
>     /etc/snort/snort.conf(104)
>     >>> Missing argument to RULE_PATH
>     >>> Fatal Error, Quitting.""
>     >>
>     >> please post lines 100 thru 110 of your /etc/snort/snort.conf
>     file...
>     >>
>     >>
>
>
>     -- 
>       NOTE: No off-list assistance is given without prior approval.
>             *Please keep mailing list traffic on the list unless*
>             *a signed and pre-paid contract is in effect with us.*
>     _______________________________________________
>     Snort-users mailing list
>     Snort-users at lists.snort.org <mailto:Snort-users at lists.snort.org>
>     Go to this URL to change user options or unsubscribe:
>     https://lists.snort.org/mailman/listinfo/snort-users
>
>             To unsubscribe, send an email to:
>             snort-users-leave at lists.snort.org
>     <mailto:snort-users-leave at lists.snort.org>
>
>     Please visit http://blog.snort.org to stay current on all the
>     latest Snort news!
>
>     Please follow these rules:
>     https://snort.org/faq/what-is-the-mailing-list-etiquette
>     <https://snort.org/faq/what-is-the-mailing-list-etiquette>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20190518/52ae8d54/attachment.html>


More information about the Snort-users mailing list