Snort mailing list archives

RE: new user


From: Lance Lloyd <lance.lloyd () atlasdmt com>
Date: Fri, 3 Jan 2003 14:42:29 -0800

Maybe I'm mistaken, but I believe I read somehwere that there was a problem
with the RULE_PATH variable, and you have to just put the full path to each
rules file.  At least that's what I did, and it works great.
 
Cheers,

lance

-----Original Message-----
From: lee [mailto:lee () sysos com]
Sent: Friday, January 03, 2003 1:24 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] new user


 

 
 
Help please getting the following
 
 
 
 
C:\SNORT>snort.exe -v -i2 -c c:\snort\snort.conf -l c:\snort\logs
Initializing Output Plugins!
Running in IDS mode
Log directory = c:\snort\logs
 
Initializing Network Interface \
OpenPcap() device \Device\Packet_NdisWanIp network lookup:
        The operation completed successfully.
 

        --== Initializing Snort ==--
Decoding Ethernet on interface \Device\Packet_NdisWanIp
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file c:\snort\snort.conf
 
+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
ERROR: Unable to open rules file: c:\snort\snort.conf or
./c:\snort\snort.conf
Fatal Error, Quitting..
 
The following are my entries in the config file
 
var RULE_PATH c:/snort/rules
 
My rules are in the above folder, I am running w2k
 
Thanks in advance.
 
 
 
 
 

 

                        
____________________________________________________
 <http://www.incredimail.com/redir.asp?ad_id=309&lang=9>   IncrediMail -
Email has finally evolved -
<http://www.incredimail.com/redir.asp?ad_id=309&lang=9> Click Here


Current thread: