Snort mailing list archives

Re: Fw: Error in Postgres dbase


From: James Riden <j.riden () massey ac nz>
Date: Wed, 19 Jan 2005 18:46:58 +1300

"reynald" <rtm () cybees com> writes:

   fyi,



   I did some research and found out that i need to configure the
   sensor_name in snort.conf. It indicates that i need to set this when i
   have

   multiple sensors logging on the same database. The said error below
   was resolved, but my rules wont take effect still.



   did i missed something?

The flexresp2 plugin which does blocking needs to be applied as a
patch to snort 2.2.0 sources. Have you applied this? (snort 2.3 will
come with flexresp2 built in I think.)

Otherwise, try putting an obvious syntax error into your new rules and
see if snort fails to start up.

If that doesn't show anything, post your new rules here, and your
config for eth1 and eth2.

(Oh, and thanks - I'd been meaning to look up how to set the sensor
name :)

cheers,
 Jamie
-- 
James Riden / j.riden () massey ac nz / Systems Security Engineer
Information Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/




-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: