| View previous topic :: View next topic |
| Author |
Message |
fruitmonkey
n00b
Joined: 31 Dec 2002
Posts: 22
|
 Posted: Fri Mar 07, 2003 2:32 am Post subject: Snort issues |
 |
|
I had snort working fine using 1.8.7 When I updated snort today after the security issue, I'm having some problems getting it started.
When I try to start snort from the init.d script, all seems to go well, but the service doesn't get started (probably because of an error, see later).
When I try to start snort on it's own, i.e. type 'snort' from the command line, I get this error
WARNING: unknown output plugin: 'alert_syslog'ERROR: Unable to open rules file: ../rules/bad-traffic.rules or ./../rules/bad-traffic.rules
Fatal Error, Quitting..
Any ideas? |
|
| Back to top |
|
 |
Chris W
l33t
Joined: 25 Jun 2002
Posts: 972
Location: Brisbane, Australia
|
| Posted: Fri Mar 07, 2003 4:55 am Post subject: |
|
|
You'll need to modify the line:
| Code: | | var RULE_PATH ../rules |
to
in /etc/snort/snort.conf.
If you use the distributed snort.conf file then you'll also strike Bug 11643. It's easy enough to manually retrieve the file from the source tar ball, or make the suggested mod to a local copy of the ebuild and re-emerge.
_________________
Cheers,
Chris W
"Common sense: The collection of prejudices acquired by age 18." -- Einstein |
|
| Back to top |
|
|
fruitmonkey
n00b
Joined: 31 Dec 2002
Posts: 22
|
| Posted: Fri Mar 07, 2003 12:40 pm Post subject: |
|
|
| Thanks, I'll look into that... |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
