Snort mailing list archives

include problem in 1.8.6


From: Mipam <mipam () ibb net>
Date: Wed, 10 Apr 2002 22:39:24 +0200

Hi,

I tried to run snort with a conf file like this:

include classifictation.config

alert icmp any any -> $INTERNAL any (msg:"ICMP ISS Pinger"; content:"|495353504e
475251|";itype:8;depth:32; reference:arachnids,158; classtype:attempted-recon; s
id:465; rev:1;)

etc ....

But when i try to run snort i'll get:
unable to open rules file: classification.config or ./classifiaction.config.
I'll attach a krace.out (compressed with bz2) for
anybody who's interested to see what happens.
Any hints? (btw, i had the identical problem in 1.8.4
Bye,

Mipam.

Attachment: ktrace.out.bz2
Description:


Current thread: