<div dir="ltr"><div><div><div>Hello Snort-users,<br><br></div>I am attaching my config file.<br><br></div>Thank you<br></div>Pri<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Feb 18, 2016 at 10:52 AM, Vishnu Sriram (visriram) <span dir="ltr"><<a href="mailto:visriram@...589..." target="_blank">visriram@...589...</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">





<div link="blue" vlink="purple" lang="EN-US">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Hi,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">         Can you please share your conf file? It seems there is a parsing error at line 291 in snort.conf.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Vishnu.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<table style="width:407.25pt" width="543" border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="3" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#1f497d"><img src="cid:image001.jpg@...17454..." alt="http://www.cisco.com/web/europe/images/email/signature/logo05.jpg" height="73" width="110"><u></u><u></u></span></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in .25in" nowrap valign="top">
<p class="MsoNormal"><b><span style="font-size:8.5pt;font-family:"Arial","sans-serif";color:#666666">Vishnu Sriram</span></b><span style="font-size:8.5pt;font-family:"Arial","sans-serif";color:#666666"><br>
ENGINEER.SOFTWARE ENGINEERING<br>
<a href="mailto:visriram@...589..." target="_blank">visriram@...589...</a><br>
Phone: <u></u><u></u></span></p>
</td>
<td style="width:50.0%;padding:11.25pt 0in 7.5pt 15.0pt" valign="top" width="50%">
<p class="MsoNormal"><b><span style="font-size:8.5pt;font-family:"Arial","sans-serif";color:#666666">Cisco Systems Limited</span></b><span style="font-size:8.5pt;font-family:"Arial","sans-serif";color:#666666"><br>
<br>
<br>
<br>
<br>
IN<br>
</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><a href="http://www.cisco.com" target="_blank"><span style="font-size:8.5pt;font-family:"Arial","sans-serif";color:#666666">Cisco.com</span></a></span><span style="font-size:8.5pt;font-family:"Arial","sans-serif";color:#666666"><u></u><u></u></span></p>
</td>
<td style="padding:0in 0in 0in 0in"></td>
</tr>
<tr>
<td colspan="3" style="padding:0in 0in 0in 0in">
<table style="width:100.0%" width="100%" border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="padding:0in 15.0pt 3.75pt .25in"></td>
</tr>
<tr>
<td style="border:none;border-bottom:solid #cccccc 1.0pt;padding:0in 0in 0in 0in">
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="color:#1f497d" lang="EN-GB"><u></u> <u></u></span></p>
<table style="width:300.0pt" width="400" border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="padding:0in 15.0pt 0in .25in">
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#009900"><img src="cid:image002.gif@...17454..." alt="Think before you print." height="19" width="18" border="0">Think before you print.<u></u><u></u></span></p>
</td>
</tr>
<tr>
<td style="padding:5.25pt 15.0pt 4.5pt .25in">
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#999999">This email may contain confidential and privileged material for the sole use of the intended recipient.
 Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#999999">For corporate legal information go to:<br>
</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><a href="http://www.cisco.com/web/about/doing_business/legal/cri/index.html" title="Legal Information" target="_blank"><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#0e58a0">http://www.cisco.com/web/about/doing_business/legal/cri/index.html</span></a></span><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#999999"><u></u><u></u></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> priyank shah [mailto:<a href="mailto:priyankshah902002@...11827..." target="_blank">priyankshah902002@...11827...</a>]
<br>
<b>Sent:</b> Thursday, February 18, 2016 4:14 PM<span class=""><br>
<b>To:</b> <a href="mailto:snort-users@lists.sourceforge.net" target="_blank">snort-users@lists.sourceforge.net</a><br>
<b>Subject:</b> [Snort-users] Error: /etc/snort/snort.conf(291) => invalid stream tcp policy option<u></u><u></u></span></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Hello Snort-users,<u></u><u></u></p><div><div class="h5">
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I tried installing snort-2.9.8.0 on ubuntu 15.10 that I am running on Oracle VirtualBox. After the installation I tried running <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">sudo snort -T -i eth0 -c /etc/snort/snort.conf<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">to check the configuration.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">But I got an error saying <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Error: /etc/snort/snort.conf(291) => Invalid Stream TCP policy option<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Fatal Error, Quitting..<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Can anyone please help.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Pri<u></u><u></u></p>
</div>
</div></div></div>
</div>
</div>

</blockquote></div><br></div>