Re: Snort won't run

["alexus" <ml () db nexgen com>]

hmm works with this one:)
thanks

----- Original Message ----- 
From: "Dave Ryan" <dave.ryan () eircom net>
To: "alexus" <ml () db nexgen com>
Cc: <snort-users () lists sourceforge net>
Sent: Thursday, May 10, 2001 6:12 PM
Subject: Re: [Snort-users] Snort won't run


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> The latest rulesfile is specific to 1.8
>
> Try these rules instead: www.snort.org/Files/Current/snortrules.tar.gz
>
> Rgds.
>
> Quoting alexus (ml () db nexgen com):
> > i'm using snort 1.7 with latest set of rules
> >
> > for some reason it won't run, any ideas?
> >
> > su-2.04# /usr/local/bin/snort -c /usr/local/bin/rules/snort.conf
> >
> >         --== Initializing Snort ==--
> >
> > Initializing Network Interface fxp0
> > Decoding Ethernet on interface fxp0
> > Initializing Preprocessors!
> > Initializing Plug-ins!
> > Initializating Output Plugins!
> >
> > +++++++++++++++++++++++++++++++++++++++++++++++++++
> > Initializing rule chains...
> >
> > *WARNING*: unknown preprocessor "stream2", ignoring!
> >
> >
> > *WARNING*: unknown preprocessor "rpc_decode", ignoring!
> >
> >
> > *WARNING*: unknown preprocessor "bo", ignoring!
> >
> >
> > *WARNING*: unknown preprocessor "telnet_decode", ignoring!
> >
> > database: compiled support for ( mysql )
> > database: configured to use mysql
> > database:          user = alexus
> > database: database name = alexus
> > database: password is set
> > database:          host = localhost
> > database:   sensor name = 64.81.208.245
> > database:     sensor id = 1
> > database: using the "log" facility
> > Error: Unknown config: classification
> > su-2.04# 
> >
> > what am i doin wrong now?
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> - -- 
> Dave Ryan Computer Incident Response Team 
> dave.ryan () eircom net Eircom Multimedia
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.4 (OpenBSD)
> Comment: For info see http://www.gnupg.org
>
> iEYEARECAAYFAjr7EkoACgkQHSjBCI+q2yL2jACfZmDIpaL7ajbIC4As0AqpYjkG
> w0cAn3hTAY6RgjvX2aJykUVMlFYsOO+D
> =pFey
> -----END PGP SIGNATURE-----


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users