Re: [Snort-users] Upgrading snort 2.0.* to -> 2.1.2 , and now i cant ....

i really cant find in the manul the option to upgrade
2.0.* to 2.1.* ,, and the steps to change http_decode
to -> http_inspect ..

help ?¿?¿




--- Michael Boman <michael.boman@boseco.com>
escribió: > This is starting to become a FAQ...
>
> http_decode preprocessor has been replaced with
> http_inspect, update
> snort.conf accordingly (check out the manual for
> Snort on snort.org how
> to configure it).
>
> Best regards
> Michael Boman
>
> On Mon, 2004-06-07 at 16:39, soldier Mx wrote:
> > Hey i upgraded Snort 2.0.5 to 2.1.2 and...
> >
> > now i cant run Snort...
> > I just upgraded, i didnt modify anything.. just
> > made the up grade.... i think i have to change
> > something, but i dont know where to start..
> >
> > here i show..
> >
> > root@linux tripwire # /etc/init.d/snort status
> > * status: started
> > root@linux tripwire # /etc/init.d/snort zap
> > * Manually resetting snort to stopped state.
> > root@linux tripwire # /etc/init.d/snort start
> > * Starting snort...
>
> > [ ok ]
> > root@linux tripwire # ps aux |grep snort
> > root 14550 0.0 0.3 1516 436 pts/2 S
> > 03:33 0:00 grep snort
> > root@linux tripwire #
> >
> >
> > How you can see, the daemon is not running and i
> get
> > this in the LOGS...
> >
> >
> > Jun 7 03:32:55 linux snort: Initializing daemon
> mode
> > Jun 7 03:32:55 linux snort: PID path stat checked
> out
> > ok, PID path set to /var/run/
> > Jun 7 03:32:55 linux snort: Writing PID "16857"
> to
> > file "/var/run//snort_eth0.pid"
> > Jun 7 03:32:56 linux snort: FATAL ERROR: unknown
> > preprocessor "`k^\^H_decode"
> > Jun 7 03:32:55 linux kernel: device eth0 entered
> > promiscuous mode
> > Jun 7 03:32:56 linux kernel: device eth0 left
> > promiscuous mode
> >
> >
> >
> > THankssss if you can help me!
> >
> > from mexico
>
> Best regards
> Michael Boman
>
> --
> Michael Boman <michael.boman@boseco.com>
> BOSECO Internet Security Solutions -
> http://www.boseco.com
>
>
>
>
-------------------------------------------------------
> This SF.Net email is sponsored by: GNOME Foundation
> Hackers Unite! GUADEC: The world's #1 Open Source
> Desktop Event.
> GNOME Users and Developers European Conference,
> 28-30th June in Norway
> http://2004/guadec.org
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or
> unsubscribe:
>
https://lists.sourceforge.net/lists/...fo/snort-users
> Snort-users list archive:
>
http://www.geocrawler.com/redir-sf.p...st=snort-users

__________________________________________________ _______
Do You Yahoo!?
La mejor conexión a internet y 25MB extra a tu correo por $100 al mes. http://net.yahoo.com.mx


-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the
one installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users