Snort mailing list archives
RE: new user
From: Lance Lloyd <lance.lloyd () atlasdmt com>
Date: Fri, 3 Jan 2003 14:42:29 -0800
Maybe I'm mistaken, but I believe I read somehwere that there was a problem with the RULE_PATH variable, and you have to just put the full path to each rules file. At least that's what I did, and it works great. Cheers, lance -----Original Message----- From: lee [mailto:lee () sysos com] Sent: Friday, January 03, 2003 1:24 PM To: snort-users () lists sourceforge net Subject: [Snort-users] new user Help please getting the following C:\SNORT>snort.exe -v -i2 -c c:\snort\snort.conf -l c:\snort\logs Initializing Output Plugins! Running in IDS mode Log directory = c:\snort\logs Initializing Network Interface \ OpenPcap() device \Device\Packet_NdisWanIp network lookup: The operation completed successfully. --== Initializing Snort ==-- Decoding Ethernet on interface \Device\Packet_NdisWanIp Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file c:\snort\snort.conf +++++++++++++++++++++++++++++++++++++++++++++++++++ Initializing rule chains... ERROR: Unable to open rules file: c:\snort\snort.conf or ./c:\snort\snort.conf Fatal Error, Quitting.. The following are my entries in the config file var RULE_PATH c:/snort/rules My rules are in the above folder, I am running w2k Thanks in advance. ____________________________________________________ <http://www.incredimail.com/redir.asp?ad_id=309&lang=9> IncrediMail - Email has finally evolved - <http://www.incredimail.com/redir.asp?ad_id=309&lang=9> Click Here
Current thread:
- new user lee (Jan 03)
- <Possible follow-ups>
- RE: new user Lance Lloyd (Jan 03)