Snort mailing list archives

ssn_file location


From: Gregory Zill <gregory () r3g net>
Date: Thu, 19 Aug 2010 15:45:07 -0500

The README.sensitive_data does not specify where to place the ssn_file
or if perhaps it needs a path. I have made sure I have file owned by
snort user, but I still get following error when enabling the ssn_file
option.

FATAL ERROR: Error parsing Social Security group data from file:
ssn_groups_Aug10.csv

/etc/snort/snort.conf section
8<----snip-----
# Sensitive Data Preprocessor
preprocessor sensitive_data: alert_threshold 25 \
                mask_output \
                ssn_file ssn_groups_Aug10.csv

file location:
/etc/snort/ssn_groups_Aug10.csv
-- 
The whole purpose of places like Starbucks is for people with no
decision-making ability whatsoever to make six decisions just to buy
one cup of coffee. Short, tall, light, dark, caf, decaf, low-fat,
non-fat, etc. So people who don't know what the hell they're doing or
who on earth they are can, for only $2.95, get not just a cup of
coffee but an absolutely defining sense of self: Tall! Decaf!
Cappuccino!             ~Joe (Tom Hanks) in You've Got Mail

Gregory W Zill, MBA, CISSP

------------------------------------------------------------------------------
This SF.net email is sponsored by 

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev 
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: