Snort mailing list archives

Problem stopping snort


From: "senthu" <senthu () makmal cc>
Date: Tue, 9 Mar 2004 20:37:04 +0800

Hi all,
i have been experincing problem stoping or restarting snort, when i start the status says ok,
when i ps -ef there in no sign of snort running. when i stop "./snortd stop" there is an error displayed

 ./snortd status
snort dead but subsys locked
 ./snortd stop  
Stopping snort: [FAILED]

i did check the messages in the var/log/messages the message said that there was error in line 279 of the snort.conf 
file preprocessor http_decode: 80 unicode iis_alt_unicode double_encode iis_flip_slash full_whitespace

i have tried all possible ways such as rm -f /var/lock/subsys/snort
and restart.

and even issue command snort -T error was "ERROR:  unknown preprocessor "°ßB°ßBP"
Fatal Error, Quitting.."

please can any one help i really want this guy to work.....
i would be greatful if any one can guide me....
thank you

Current thread: