<div dir="ltr">Hey Al,<div><br></div><div>I removed -i eth0. And since I'm using Ubuntu 15.10 my interfaces are named enp0s8 ans so on, but I tried removing it as well, still same error,</div><div><br></div><div><span style="font-size:12.8px">Error: /etc/snort/snort.conf(291) => Invalid Stream TCP policy option</span><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Feb 18, 2016 at 5:50 AM, Al Lewis (allewi) <span dir="ltr"><<a href="mailto:allewi@...15110...89..." target="_blank">allewi@...589...</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">





<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Remove the -I eth0 to check the configuration.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Also.. its telling you that your problem is something on line 291 of your config file.
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:red">Error: /etc/snort/snort.conf(291)<u></u><u></u></span></b></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:red"><u></u> <u></u></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Candara","sans-serif";color:#1f497d">Albert Lewis<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Candara","sans-serif";color:#888888">QA Software Engineer<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Georgia","serif";color:#999999">SOURCE</span><b><span style="font-family:"Georgia","serif";color:red">fire</span></b><span style="font-family:"Georgia","serif";color:#999999">, Inc.
</span><span style="font-family:"Georgia","serif";color:#888888">now part of </span>
<b><span style="font-family:"Georgia","serif";color:#31849b">Cisco</span></b><span style="font-family:"Georgia","serif";color:#888888"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Candara","sans-serif";color:#999999">9780 Patuxent Woods Drive<br>
Columbia, MD 21046 </span><span style="font-family:"Candara","sans-serif";color:#888888"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Candara","sans-serif";color:#999999">Phone: (office) </span><span style="font-family:"Candara","sans-serif";color:#1f497d"><a href="tel:443.430.7112" value="+14434307112" target="_blank">443.430.7112</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Candara","sans-serif";color:#999999">Email:
</span><span style="font-family:"Candara","sans-serif";color:#1f497d"><a href="mailto:allewi@...589..." target="_blank">allewi@...589...</a></span><span style="font-family:"Candara","sans-serif";color:#4f81bd"> </span><span style="font-family:"Candara","sans-serif";color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> priyank shah [mailto:<a href="mailto:priyankshah902002@...11827..." target="_blank">priyankshah902002@...11827...</a>]
<br>
<b>Sent:</b> Thursday, February 18, 2016 5:44 AM<br>
<b>To:</b> <a href="mailto:snort-users@lists.sourceforge.net" target="_blank">snort-users@lists.sourceforge.net</a><br>
<b>Subject:</b> [Snort-users] Error: /etc/snort/snort.conf(291) => invalid stream tcp policy option<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Hello Snort-users,<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I tried installing snort-2.9.8.0 on ubuntu 15.10 that I am running on Oracle VirtualBox. After the installation I tried running <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">sudo snort -T -i eth0 -c /etc/snort/snort.conf<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">to check the configuration.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">But I got an error saying <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Error: /etc/snort/snort.conf(291) => Invalid Stream TCP policy option<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Fatal Error, Quitting..<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Can anyone please help.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Pri<u></u><u></u></p>
</div>
</div>
</div></div></div>
</div>

</blockquote></div><br></div>