Snort mailing list archives
Re: Snort isn't starting at the Ubuntu:
From: Leon <seclists () rm-rf co uk>
Date: Sat, 29 Mar 2008 22:13:09 +0100
Hi Looks like there are some problems with your snort.conf
Mar 28 09:23:17 wilter-ubuntu snort[24673]: /etc/snort/ snort.conf(214) unknown dynamic preprocessor "frag2"
frag2 has been replaced with frag3, You shouldn't have it enabled on line 214 of your snort.conf
As for the other errors, post your snort.conf with the full output of a snort -c /etc/snort/snort.conf -T and ill take a look.
-Leon On 28 Mar 2008, at 17:45, jose wilter frazao wrote:
Hello,I do downloaded of snort from www.snort.com and compiled the Snort with support to Mysql, and I installed in the Ubuntu 7.04. When I insert the command "/usr/local/bin/snort -D -c /etc/snort/ snort.conf" for start the daemon of the Snort show the massage in the "/var/log/syslog":Mar 28 09:23:17 wilter-ubuntu snort[24673]: /etc/snort/ snort.conf(214) unknown dynamic preprocessor "frag2" Mar 28 09:23:17 wilter-ubuntu snort[24673]: /etc/snort/ snort.conf(360) unknown dynamic preprocessor "telnet_decode" Mar 28 09:23:17 wilter-ubuntu snort[24673]: /etc/snort/ snort.conf(500) unknown dynamic preprocessor "xlink2state" Mar 28 09:23:17 wilter-ubuntu snort[24673]: FATAL ERROR: Misconfigured dynamic preprocessor(s)What should I do to correct this problem? ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort isn't starting at the Ubuntu: jose wilter frazao (Mar 28)
- Re: Snort isn't starting at the Ubuntu: Leon (Mar 29)
- Message not available
- Re: Snort isn't starting at the Ubuntu: Leon (Mar 31)
- Missing Portscan Records in 2.8 frederick sonnichsen (Mar 31)
- Message not available
- Re: Snort isn't starting at the Ubuntu: Leon (Mar 29)
- Re: Snort isn't starting at the Ubuntu: Joel Esler (Mar 29)
- Re: Snort isn't starting at the Ubuntu: Jack Pepper (Mar 30)