Snort mailing list archives

Re: Newbie Problem


From: "Alex Alborzfard" <aalborz06 () gmail com>
Date: Wed, 2 Jul 2008 12:11:16 -0400

Ok I tried to point to the path in snort.conf, but it didn't work. The
directory path holding the dynamic engine library file is:
D:\Snort\lib\snort_dynamicengine and the only library file name there is:
sf_engine.dll.
So I specified the paths to dynamicengine and dynamic preprocessor on the
command line and it worked.
But now I get a different error:

ERROR: OpenAlertFile() => fopen() alert file log/alert.ids: No such file or
directory


I can't find this file anywhere under Snort installation directory or any
reference to it in Snort.conf. Do I have to create this file? Otherwise
where or how do I have to specify the path to this file?

TIA

Alex

On Tue, Jun 17, 2008 at 1:45 PM, Todd Wease <twease () sourcefire com> wrote:

Alex,

You need to configure the path to that in snort.conf (look for "Step #2:
Configure dynamic loaded libraries" in snort.conf) or alternatively specify
the path on the command line (run Snort with the '-h' option or take a look
at doc/README).

Todd


Alex Alborzfard wrote:

No I didn't. I specified the path and this time I didn't get the error,
but
got this one:

 Failed to load /usr/local/lib/snort_dynamicengine/libsf_engine.so: 126

On Tue, Jun 17, 2008 at 1:11 PM, Todd Wease <twease () sourcefire com>
wrote:

 Alex,

Did you specify the path to snort.conf on the command line via the '-c'
switch?

Todd

Alex Alborzfard wrote:

 I've installed latest Snort (2.8) on a Win2K pro box with winpcap.
When I run snort I get the following error:

ERROR: Unable to open rules file: snort.conf or ./snort.conf

I modified snort.conf to point to the correct directory path, but I
still
get the error.

Any help would be greatly appreciated.



------------------------------------------------------------------------


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php


------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




------------------------------------------------------------------------

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php


------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: